<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
<meta name="generator" content="Doxygen 1.8.17"/>
<meta name="viewport" content="width=device-width, initial-scale=1"/>
<title>Win32k: security.c 源文件</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="dynsections.js"></script>
<link href="navtree.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="resize.js"></script>
<script type="text/javascript" src="navtreedata.js"></script>
<script type="text/javascript" src="navtree.js"></script>
<link href="search/search.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="search/searchdata.js"></script>
<script type="text/javascript" src="search/search.js"></script>
<link href="doxygen.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
 <tbody>
 <tr style="height: 56px;">
  <td id="projectalign" style="padding-left: 0.5em;">
   <div id="projectname">Win32k
   </div>
  </td>
 </tr>
 </tbody>
</table>
</div>
<!-- end header part -->
<!-- 制作者 Doxygen 1.8.17 -->
<script type="text/javascript">
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&amp;dn=gpl-2.0.txt GPL-v2 */
var searchBox = new SearchBox("searchBox", "search",false,'搜索');
/* @license-end */
</script>
<script type="text/javascript" src="menudata.js"></script>
<script type="text/javascript" src="menu.js"></script>
<script type="text/javascript">
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&amp;dn=gpl-2.0.txt GPL-v2 */
$(function() {
  initMenu('',true,false,'search.php','搜索');
  $(document).ready(function() { init_search(); });
});
/* @license-end */</script>
<div id="main-nav"></div>
</div><!-- top -->
<div id="side-nav" class="ui-resizable side-nav-resizable">
  <div id="nav-tree">
    <div id="nav-tree-contents">
      <div id="nav-sync" class="sync"></div>
    </div>
  </div>
  <div id="splitbar" style="-moz-user-select:none;" 
       class="ui-resizable-handle">
  </div>
</div>
<script type="text/javascript">
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&amp;dn=gpl-2.0.txt GPL-v2 */
$(document).ready(function(){initNavTree('a00839_source.html',''); initResizable(); });
/* @license-end */
</script>
<div id="doc-content">
<!-- window showing the filter options -->
<div id="MSearchSelectWindow"
     onmouseover="return searchBox.OnSearchSelectShow()"
     onmouseout="return searchBox.OnSearchSelectHide()"
     onkeydown="return searchBox.OnSearchSelectKey(event)">
</div>

<!-- iframe showing the search results (closed by default) -->
<div id="MSearchResultsWindow">
<iframe src="javascript:void(0)" frameborder="0" 
        name="MSearchResults" id="MSearchResults">
</iframe>
</div>

<div class="header">
  <div class="headertitle">
<div class="title">security.c</div>  </div>
</div><!--header-->
<div class="contents">
<a href="a00839.html">浏览该文件的文档.</a><div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno">    1</span>&#160; </div>
<div class="line"><a name="l00013"></a><span class="lineno"><a class="line" href="a00839.html#a8530c758c72102effff2af379c7c5144">   13</a></span>&#160;<span class="preprocessor">#define _SECURITY 1</span></div>
<div class="line"><a name="l00014"></a><span class="lineno">   14</span>&#160;<span class="preprocessor">#include &quot;<a class="code" href="a03629.html">precomp.h</a>&quot;</span></div>
<div class="line"><a name="l00015"></a><span class="lineno">   15</span>&#160;<span class="preprocessor">#pragma hdrstop</span></div>
<div class="line"><a name="l00016"></a><span class="lineno">   16</span>&#160; </div>
<div class="line"><a name="l00017"></a><span class="lineno">   17</span>&#160;<span class="comment">/*</span></div>
<div class="line"><a name="l00018"></a><span class="lineno">   18</span>&#160;<span class="comment"> * General security stuff</span></div>
<div class="line"><a name="l00019"></a><span class="lineno">   19</span>&#160;<span class="comment"> */</span></div>
<div class="line"><a name="l00020"></a><span class="lineno"><a class="line" href="a00839.html#ad04da95adc05d69c32d9d6b702c89489">   20</a></span>&#160;PSECURITY_DESCRIPTOR <a class="code" href="a00839.html#ad04da95adc05d69c32d9d6b702c89489">gpsdInitWinSta</a> = NULL;</div>
<div class="line"><a name="l00021"></a><span class="lineno">   21</span>&#160; </div>
<div class="line"><a name="l00022"></a><span class="lineno"><a class="line" href="a00842.html#a515921616ee307c5862eb0be3a8e7c1e">   22</a></span>&#160;PRIVILEGE_SET <a class="code" href="a00839.html#a515921616ee307c5862eb0be3a8e7c1e">psTcb</a> = { 1, PRIVILEGE_SET_ALL_NECESSARY,</div>
<div class="line"><a name="l00023"></a><span class="lineno">   23</span>&#160;    { SE_TCB_PRIVILEGE, 0 }</div>
<div class="line"><a name="l00024"></a><span class="lineno">   24</span>&#160;};</div>
<div class="line"><a name="l00025"></a><span class="lineno">   25</span>&#160; </div>
<div class="line"><a name="l00026"></a><span class="lineno">   26</span>&#160;<span class="comment">/*</span></div>
<div class="line"><a name="l00027"></a><span class="lineno">   27</span>&#160;<span class="comment"> * windowstation generic mapping</span></div>
<div class="line"><a name="l00028"></a><span class="lineno">   28</span>&#160;<span class="comment"> */</span></div>
<div class="line"><a name="l00029"></a><span class="lineno"><a class="line" href="a00839.html#adc61ef551cf8e713e7f0014b5932ffcd">   29</a></span>&#160;GENERIC_MAPPING <a class="code" href="a00839.html#adc61ef551cf8e713e7f0014b5932ffcd">WinStaMapping</a> = {</div>
<div class="line"><a name="l00030"></a><span class="lineno">   30</span>&#160;    WINSTA_ENUMDESKTOPS | WINSTA_READATTRIBUTES | WINSTA_ENUMERATE |</div>
<div class="line"><a name="l00031"></a><span class="lineno">   31</span>&#160;        WINSTA_READSCREEN | STANDARD_RIGHTS_READ,</div>
<div class="line"><a name="l00032"></a><span class="lineno">   32</span>&#160; </div>
<div class="line"><a name="l00033"></a><span class="lineno">   33</span>&#160;    WINSTA_ACCESSCLIPBOARD | WINSTA_CREATEDESKTOP | WINSTA_WRITEATTRIBUTES |</div>
<div class="line"><a name="l00034"></a><span class="lineno">   34</span>&#160;        STANDARD_RIGHTS_WRITE,</div>
<div class="line"><a name="l00035"></a><span class="lineno">   35</span>&#160; </div>
<div class="line"><a name="l00036"></a><span class="lineno">   36</span>&#160;    WINSTA_ACCESSGLOBALATOMS | WINSTA_EXITWINDOWS | STANDARD_RIGHTS_EXECUTE,</div>
<div class="line"><a name="l00037"></a><span class="lineno">   37</span>&#160; </div>
<div class="line"><a name="l00038"></a><span class="lineno">   38</span>&#160;    WINSTA_ENUMDESKTOPS | WINSTA_READATTRIBUTES | WINSTA_ENUMERATE |</div>
<div class="line"><a name="l00039"></a><span class="lineno">   39</span>&#160;        WINSTA_READSCREEN | WINSTA_ACCESSCLIPBOARD | WINSTA_CREATEDESKTOP |</div>
<div class="line"><a name="l00040"></a><span class="lineno">   40</span>&#160;        WINSTA_WRITEATTRIBUTES | WINSTA_ACCESSGLOBALATOMS |</div>
<div class="line"><a name="l00041"></a><span class="lineno">   41</span>&#160;        WINSTA_EXITWINDOWS | STANDARD_RIGHTS_REQUIRED</div>
<div class="line"><a name="l00042"></a><span class="lineno">   42</span>&#160;};</div>
<div class="line"><a name="l00043"></a><span class="lineno">   43</span>&#160; </div>
<div class="line"><a name="l00044"></a><span class="lineno">   44</span>&#160;<span class="comment">/*</span></div>
<div class="line"><a name="l00045"></a><span class="lineno">   45</span>&#160;<span class="comment"> * desktop generic mapping</span></div>
<div class="line"><a name="l00046"></a><span class="lineno">   46</span>&#160;<span class="comment"> */</span></div>
<div class="line"><a name="l00047"></a><span class="lineno"><a class="line" href="a00839.html#aa43121e2fd14c10e80b0025f77eb3a00">   47</a></span>&#160;GENERIC_MAPPING <a class="code" href="a00839.html#aa43121e2fd14c10e80b0025f77eb3a00">DesktopMapping</a> = {</div>
<div class="line"><a name="l00048"></a><span class="lineno">   48</span>&#160;    DESKTOP_READOBJECTS | DESKTOP_ENUMERATE | STANDARD_RIGHTS_READ,</div>
<div class="line"><a name="l00049"></a><span class="lineno">   49</span>&#160; </div>
<div class="line"><a name="l00050"></a><span class="lineno">   50</span>&#160;    DESKTOP_WRITEOBJECTS | DESKTOP_CREATEWINDOW | DESKTOP_CREATEMENU |</div>
<div class="line"><a name="l00051"></a><span class="lineno">   51</span>&#160;        DESKTOP_HOOKCONTROL | DESKTOP_JOURNALRECORD |</div>
<div class="line"><a name="l00052"></a><span class="lineno">   52</span>&#160;        DESKTOP_JOURNALPLAYBACK | STANDARD_RIGHTS_WRITE,</div>
<div class="line"><a name="l00053"></a><span class="lineno">   53</span>&#160; </div>
<div class="line"><a name="l00054"></a><span class="lineno">   54</span>&#160;    DESKTOP_SWITCHDESKTOP | STANDARD_RIGHTS_EXECUTE,</div>
<div class="line"><a name="l00055"></a><span class="lineno">   55</span>&#160; </div>
<div class="line"><a name="l00056"></a><span class="lineno">   56</span>&#160;    DESKTOP_READOBJECTS | DESKTOP_WRITEOBJECTS | DESKTOP_ENUMERATE |</div>
<div class="line"><a name="l00057"></a><span class="lineno">   57</span>&#160;        DESKTOP_CREATEWINDOW | DESKTOP_CREATEMENU | DESKTOP_HOOKCONTROL |</div>
<div class="line"><a name="l00058"></a><span class="lineno">   58</span>&#160;        DESKTOP_JOURNALRECORD | DESKTOP_JOURNALPLAYBACK |</div>
<div class="line"><a name="l00059"></a><span class="lineno">   59</span>&#160;        DESKTOP_SWITCHDESKTOP | STANDARD_RIGHTS_REQUIRED</div>
<div class="line"><a name="l00060"></a><span class="lineno">   60</span>&#160;};</div>
<div class="line"><a name="l00061"></a><span class="lineno">   61</span>&#160; </div>
<div class="line"><a name="l00062"></a><span class="lineno">   62</span>&#160; </div>
<div class="line"><a name="l00071"></a><span class="lineno"><a class="line" href="a00899.html#a5138b9fb6a9217820dab0fa1bc797b4d">   71</a></span>&#160;PACCESS_ALLOWED_ACE <a class="code" href="a00839.html#a5138b9fb6a9217820dab0fa1bc797b4d">AllocAce</a>(</div>
<div class="line"><a name="l00072"></a><span class="lineno">   72</span>&#160;    PACCESS_ALLOWED_ACE pace,</div>
<div class="line"><a name="l00073"></a><span class="lineno">   73</span>&#160;    BYTE bType,</div>
<div class="line"><a name="l00074"></a><span class="lineno">   74</span>&#160;    BYTE bFlags,</div>
<div class="line"><a name="l00075"></a><span class="lineno">   75</span>&#160;    ACCESS_MASK am,</div>
<div class="line"><a name="l00076"></a><span class="lineno">   76</span>&#160;    PSID psid,</div>
<div class="line"><a name="l00077"></a><span class="lineno">   77</span>&#160;    LPDWORD lpdwLength)</div>
<div class="line"><a name="l00078"></a><span class="lineno">   78</span>&#160;{</div>
<div class="line"><a name="l00079"></a><span class="lineno">   79</span>&#160;    PACCESS_ALLOWED_ACE paceNew;</div>
<div class="line"><a name="l00080"></a><span class="lineno">   80</span>&#160;    <a class="code" href="a00563.html#a074685e97e89d6aa2accdfcb82328699">DWORD</a> iEnd;</div>
<div class="line"><a name="l00081"></a><span class="lineno">   81</span>&#160;    <a class="code" href="a00563.html#a074685e97e89d6aa2accdfcb82328699">DWORD</a> dwLength, dwLengthSid;</div>
<div class="line"><a name="l00082"></a><span class="lineno">   82</span>&#160; </div>
<div class="line"><a name="l00083"></a><span class="lineno">   83</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00084"></a><span class="lineno">   84</span>&#160;<span class="comment">     * Allocate space for the ACE.</span></div>
<div class="line"><a name="l00085"></a><span class="lineno">   85</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00086"></a><span class="lineno">   86</span>&#160;    dwLengthSid = RtlLengthSid(psid);</div>
<div class="line"><a name="l00087"></a><span class="lineno">   87</span>&#160;    dwLength = dwLengthSid + <span class="keyword">sizeof</span>(ACE_HEADER) + <span class="keyword">sizeof</span>(ACCESS_MASK);</div>
<div class="line"><a name="l00088"></a><span class="lineno">   88</span>&#160;    <span class="keywordflow">if</span> (pace == NULL) {</div>
<div class="line"><a name="l00089"></a><span class="lineno">   89</span>&#160;        iEnd = 0;</div>
<div class="line"><a name="l00090"></a><span class="lineno">   90</span>&#160;        pace = UserAllocPoolWithQuota(dwLength, TAG_SECURITY);</div>
<div class="line"><a name="l00091"></a><span class="lineno">   91</span>&#160;        <span class="keywordflow">if</span> (pace == NULL)</div>
<div class="line"><a name="l00092"></a><span class="lineno">   92</span>&#160;            <span class="keywordflow">return</span> NULL;</div>
<div class="line"><a name="l00093"></a><span class="lineno">   93</span>&#160;    } <span class="keywordflow">else</span> {</div>
<div class="line"><a name="l00094"></a><span class="lineno">   94</span>&#160;        iEnd = *lpdwLength;</div>
<div class="line"><a name="l00095"></a><span class="lineno">   95</span>&#160;        paceNew = UserAllocPoolWithQuota(iEnd + dwLength, TAG_SECURITY);</div>
<div class="line"><a name="l00096"></a><span class="lineno">   96</span>&#160;        <span class="keywordflow">if</span> (paceNew == NULL)</div>
<div class="line"><a name="l00097"></a><span class="lineno">   97</span>&#160;            <span class="keywordflow">return</span> NULL;</div>
<div class="line"><a name="l00098"></a><span class="lineno">   98</span>&#160;        RtlCopyMemory(paceNew, pace, iEnd);</div>
<div class="line"><a name="l00099"></a><span class="lineno">   99</span>&#160;        UserFreePool(pace);</div>
<div class="line"><a name="l00100"></a><span class="lineno">  100</span>&#160;        pace = paceNew;</div>
<div class="line"><a name="l00101"></a><span class="lineno">  101</span>&#160;    }</div>
<div class="line"><a name="l00102"></a><span class="lineno">  102</span>&#160;    *lpdwLength = dwLength + iEnd;</div>
<div class="line"><a name="l00103"></a><span class="lineno">  103</span>&#160; </div>
<div class="line"><a name="l00104"></a><span class="lineno">  104</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00105"></a><span class="lineno">  105</span>&#160;<span class="comment">     * Insert the new ACE.</span></div>
<div class="line"><a name="l00106"></a><span class="lineno">  106</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00107"></a><span class="lineno">  107</span>&#160;    paceNew = (PACCESS_ALLOWED_ACE)((PBYTE)pace + iEnd);</div>
<div class="line"><a name="l00108"></a><span class="lineno">  108</span>&#160;    paceNew-&gt;Header.AceType = bType;</div>
<div class="line"><a name="l00109"></a><span class="lineno">  109</span>&#160;    paceNew-&gt;Header.AceSize = (USHORT)dwLength;</div>
<div class="line"><a name="l00110"></a><span class="lineno">  110</span>&#160;    paceNew-&gt;Header.AceFlags = bFlags;</div>
<div class="line"><a name="l00111"></a><span class="lineno">  111</span>&#160;    paceNew-&gt;Mask = am;</div>
<div class="line"><a name="l00112"></a><span class="lineno">  112</span>&#160;    RtlCopySid(dwLengthSid, &amp;paceNew-&gt;SidStart, psid);</div>
<div class="line"><a name="l00113"></a><span class="lineno">  113</span>&#160;    <span class="keywordflow">return</span> pace;</div>
<div class="line"><a name="l00114"></a><span class="lineno">  114</span>&#160;}</div>
<div class="line"><a name="l00115"></a><span class="lineno">  115</span>&#160; </div>
<div class="line"><a name="l00116"></a><span class="lineno">  116</span>&#160; </div>
<div class="line"><a name="l00125"></a><span class="lineno"><a class="line" href="a00899.html#a56fbb1227212dadeed7bcf9764bcb0bf">  125</a></span>&#160;PSECURITY_DESCRIPTOR <a class="code" href="a00839.html#a56fbb1227212dadeed7bcf9764bcb0bf">CreateSecurityDescriptor</a>(</div>
<div class="line"><a name="l00126"></a><span class="lineno">  126</span>&#160;    PACCESS_ALLOWED_ACE paceList,</div>
<div class="line"><a name="l00127"></a><span class="lineno">  127</span>&#160;    <a class="code" href="a00563.html#a074685e97e89d6aa2accdfcb82328699">DWORD</a> cAce,</div>
<div class="line"><a name="l00128"></a><span class="lineno">  128</span>&#160;    <a class="code" href="a00563.html#a074685e97e89d6aa2accdfcb82328699">DWORD</a> cbAce,</div>
<div class="line"><a name="l00129"></a><span class="lineno">  129</span>&#160;    BOOLEAN fDaclDefaulted)</div>
<div class="line"><a name="l00130"></a><span class="lineno">  130</span>&#160;{</div>
<div class="line"><a name="l00131"></a><span class="lineno">  131</span>&#160;    PSECURITY_DESCRIPTOR psd;</div>
<div class="line"><a name="l00132"></a><span class="lineno">  132</span>&#160;    PACL pacl;</div>
<div class="line"><a name="l00133"></a><span class="lineno">  133</span>&#160;    NTSTATUS Status;</div>
<div class="line"><a name="l00134"></a><span class="lineno">  134</span>&#160; </div>
<div class="line"><a name="l00135"></a><span class="lineno">  135</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00136"></a><span class="lineno">  136</span>&#160;<span class="comment">     * Allocate the security descriptor</span></div>
<div class="line"><a name="l00137"></a><span class="lineno">  137</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00138"></a><span class="lineno">  138</span>&#160;    psd = (PSECURITY_DESCRIPTOR)UserAllocPoolWithQuota(</div>
<div class="line"><a name="l00139"></a><span class="lineno">  139</span>&#160;            cbAce + <span class="keyword">sizeof</span>(ACL) + SECURITY_DESCRIPTOR_MIN_LENGTH,</div>
<div class="line"><a name="l00140"></a><span class="lineno">  140</span>&#160;            TAG_SECURITY);</div>
<div class="line"><a name="l00141"></a><span class="lineno">  141</span>&#160;    <span class="keywordflow">if</span> (psd == NULL)</div>
<div class="line"><a name="l00142"></a><span class="lineno">  142</span>&#160;        <span class="keywordflow">return</span> NULL;</div>
<div class="line"><a name="l00143"></a><span class="lineno">  143</span>&#160;    RtlCreateSecurityDescriptor(psd, SECURITY_DESCRIPTOR_REVISION);</div>
<div class="line"><a name="l00144"></a><span class="lineno">  144</span>&#160; </div>
<div class="line"><a name="l00145"></a><span class="lineno">  145</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00146"></a><span class="lineno">  146</span>&#160;<span class="comment">     * Initialize the ACL</span></div>
<div class="line"><a name="l00147"></a><span class="lineno">  147</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00148"></a><span class="lineno">  148</span>&#160;    pacl = (PACL)((PBYTE)psd + SECURITY_DESCRIPTOR_MIN_LENGTH);</div>
<div class="line"><a name="l00149"></a><span class="lineno">  149</span>&#160;    Status = RtlCreateAcl(pacl, <span class="keyword">sizeof</span>(ACL) + cbAce, ACL_REVISION);</div>
<div class="line"><a name="l00150"></a><span class="lineno">  150</span>&#160;    <span class="keywordflow">if</span> (NT_SUCCESS(Status)) {</div>
<div class="line"><a name="l00151"></a><span class="lineno">  151</span>&#160; </div>
<div class="line"><a name="l00152"></a><span class="lineno">  152</span>&#160;        <span class="comment">/*</span></div>
<div class="line"><a name="l00153"></a><span class="lineno">  153</span>&#160;<span class="comment">         * Add the ACEs to the ACL.</span></div>
<div class="line"><a name="l00154"></a><span class="lineno">  154</span>&#160;<span class="comment">         */</span></div>
<div class="line"><a name="l00155"></a><span class="lineno">  155</span>&#160;        Status = RtlAddAce(pacl, ACL_REVISION, MAXULONG, paceList, cbAce);</div>
<div class="line"><a name="l00156"></a><span class="lineno">  156</span>&#160;        <span class="keywordflow">if</span> (NT_SUCCESS(Status)) {</div>
<div class="line"><a name="l00157"></a><span class="lineno">  157</span>&#160; </div>
<div class="line"><a name="l00158"></a><span class="lineno">  158</span>&#160;            <span class="comment">/*</span></div>
<div class="line"><a name="l00159"></a><span class="lineno">  159</span>&#160;<span class="comment">             * Initialize the SD</span></div>
<div class="line"><a name="l00160"></a><span class="lineno">  160</span>&#160;<span class="comment">             */</span></div>
<div class="line"><a name="l00161"></a><span class="lineno">  161</span>&#160;            Status = RtlSetDaclSecurityDescriptor(psd, (BOOLEAN)TRUE,</div>
<div class="line"><a name="l00162"></a><span class="lineno">  162</span>&#160;                    pacl, fDaclDefaulted);</div>
<div class="line"><a name="l00163"></a><span class="lineno">  163</span>&#160;            RtlSetSaclSecurityDescriptor(psd, (BOOLEAN)FALSE, NULL,</div>
<div class="line"><a name="l00164"></a><span class="lineno">  164</span>&#160;                    (BOOLEAN)FALSE);</div>
<div class="line"><a name="l00165"></a><span class="lineno">  165</span>&#160;            RtlSetOwnerSecurityDescriptor(psd, NULL, (BOOLEAN)FALSE);</div>
<div class="line"><a name="l00166"></a><span class="lineno">  166</span>&#160;            RtlSetGroupSecurityDescriptor(psd, NULL, (BOOLEAN)FALSE);</div>
<div class="line"><a name="l00167"></a><span class="lineno">  167</span>&#160;        }</div>
<div class="line"><a name="l00168"></a><span class="lineno">  168</span>&#160;    }</div>
<div class="line"><a name="l00169"></a><span class="lineno">  169</span>&#160; </div>
<div class="line"><a name="l00170"></a><span class="lineno">  170</span>&#160;    <span class="keywordflow">if</span> (!NT_SUCCESS(Status)) {</div>
<div class="line"><a name="l00171"></a><span class="lineno">  171</span>&#160;        UserFreePool(psd);</div>
<div class="line"><a name="l00172"></a><span class="lineno">  172</span>&#160;        <span class="keywordflow">return</span> NULL;</div>
<div class="line"><a name="l00173"></a><span class="lineno">  173</span>&#160;    }</div>
<div class="line"><a name="l00174"></a><span class="lineno">  174</span>&#160; </div>
<div class="line"><a name="l00175"></a><span class="lineno">  175</span>&#160;    <span class="keywordflow">return</span> psd;</div>
<div class="line"><a name="l00176"></a><span class="lineno">  176</span>&#160;}</div>
<div class="line"><a name="l00177"></a><span class="lineno">  177</span>&#160; </div>
<div class="line"><a name="l00178"></a><span class="lineno">  178</span>&#160; </div>
<div class="line"><a name="l00187"></a><span class="lineno"><a class="line" href="a00899.html#ad44fb853080371fbd9ce7e895cb2d46d">  187</a></span>&#160;BOOL <a class="code" href="a00839.html#ad44fb853080371fbd9ce7e895cb2d46d">InitSecurity</a>(</div>
<div class="line"><a name="l00188"></a><span class="lineno">  188</span>&#160;    VOID)</div>
<div class="line"><a name="l00189"></a><span class="lineno">  189</span>&#160;{</div>
<div class="line"><a name="l00190"></a><span class="lineno">  190</span>&#160;    PACCESS_ALLOWED_ACE paceList = NULL, pace;</div>
<div class="line"><a name="l00191"></a><span class="lineno">  191</span>&#160;    <a class="code" href="a00563.html#a074685e97e89d6aa2accdfcb82328699">DWORD</a> dwLength;</div>
<div class="line"><a name="l00192"></a><span class="lineno">  192</span>&#160; </div>
<div class="line"><a name="l00193"></a><span class="lineno">  193</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00194"></a><span class="lineno">  194</span>&#160;<span class="comment">     * Get access to exported constants</span></div>
<div class="line"><a name="l00195"></a><span class="lineno">  195</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00196"></a><span class="lineno">  196</span>&#160;    SeEnableAccessToExports();</div>
<div class="line"><a name="l00197"></a><span class="lineno">  197</span>&#160; </div>
<div class="line"><a name="l00198"></a><span class="lineno">  198</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00199"></a><span class="lineno">  199</span>&#160;<span class="comment">     * Create ACE list.</span></div>
<div class="line"><a name="l00200"></a><span class="lineno">  200</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00201"></a><span class="lineno">  201</span>&#160;    paceList = <a class="code" href="a00839.html#a5138b9fb6a9217820dab0fa1bc797b4d">AllocAce</a>(NULL,</div>
<div class="line"><a name="l00202"></a><span class="lineno">  202</span>&#160;            ACCESS_ALLOWED_ACE_TYPE,</div>
<div class="line"><a name="l00203"></a><span class="lineno">  203</span>&#160;            CONTAINER_INHERIT_ACE | INHERIT_ONLY_ACE | NO_PROPAGATE_INHERIT_ACE,</div>
<div class="line"><a name="l00204"></a><span class="lineno">  204</span>&#160;            <a class="code" href="a00839.html#adc61ef551cf8e713e7f0014b5932ffcd">WinStaMapping</a>.GenericAll,</div>
<div class="line"><a name="l00205"></a><span class="lineno">  205</span>&#160;            SeExports-&gt;SeWorldSid,</div>
<div class="line"><a name="l00206"></a><span class="lineno">  206</span>&#160;            &amp;dwLength);</div>
<div class="line"><a name="l00207"></a><span class="lineno">  207</span>&#160;    <span class="keywordflow">if</span> (paceList == NULL)</div>
<div class="line"><a name="l00208"></a><span class="lineno">  208</span>&#160;        <span class="keywordflow">return</span> FALSE;</div>
<div class="line"><a name="l00209"></a><span class="lineno">  209</span>&#160;    pace = <a class="code" href="a00839.html#a5138b9fb6a9217820dab0fa1bc797b4d">AllocAce</a>(paceList, ACCESS_ALLOWED_ACE_TYPE,</div>
<div class="line"><a name="l00210"></a><span class="lineno">  210</span>&#160;            OBJECT_INHERIT_ACE | INHERIT_ONLY_ACE,</div>
<div class="line"><a name="l00211"></a><span class="lineno">  211</span>&#160;            GENERIC_ALL, SeExports-&gt;SeWorldSid, &amp;dwLength);</div>
<div class="line"><a name="l00212"></a><span class="lineno">  212</span>&#160;    <span class="keywordflow">if</span> (pace == NULL) {</div>
<div class="line"><a name="l00213"></a><span class="lineno">  213</span>&#160;        UserFreePool(paceList);</div>
<div class="line"><a name="l00214"></a><span class="lineno">  214</span>&#160;        <span class="keywordflow">return</span> FALSE;</div>
<div class="line"><a name="l00215"></a><span class="lineno">  215</span>&#160;    }</div>
<div class="line"><a name="l00216"></a><span class="lineno">  216</span>&#160;    paceList = pace;</div>
<div class="line"><a name="l00217"></a><span class="lineno">  217</span>&#160;    pace = <a class="code" href="a00839.html#a5138b9fb6a9217820dab0fa1bc797b4d">AllocAce</a>(paceList, ACCESS_ALLOWED_ACE_TYPE,</div>
<div class="line"><a name="l00218"></a><span class="lineno">  218</span>&#160;            0, DIRECTORY_QUERY | DIRECTORY_CREATE_OBJECT,</div>
<div class="line"><a name="l00219"></a><span class="lineno">  219</span>&#160;            SeExports-&gt;SeAliasAdminsSid, &amp;dwLength);</div>
<div class="line"><a name="l00220"></a><span class="lineno">  220</span>&#160;    <span class="keywordflow">if</span> (pace == NULL) {</div>
<div class="line"><a name="l00221"></a><span class="lineno">  221</span>&#160;        UserFreePool(paceList);</div>
<div class="line"><a name="l00222"></a><span class="lineno">  222</span>&#160;        <span class="keywordflow">return</span> FALSE;</div>
<div class="line"><a name="l00223"></a><span class="lineno">  223</span>&#160;    }</div>
<div class="line"><a name="l00224"></a><span class="lineno">  224</span>&#160;    paceList = pace;</div>
<div class="line"><a name="l00225"></a><span class="lineno">  225</span>&#160;    pace = <a class="code" href="a00839.html#a5138b9fb6a9217820dab0fa1bc797b4d">AllocAce</a>(paceList, ACCESS_ALLOWED_ACE_TYPE,</div>
<div class="line"><a name="l00226"></a><span class="lineno">  226</span>&#160;            0, DIRECTORY_TRAVERSE, SeExports-&gt;SeWorldSid, &amp;dwLength);</div>
<div class="line"><a name="l00227"></a><span class="lineno">  227</span>&#160;    <span class="keywordflow">if</span> (pace == NULL) {</div>
<div class="line"><a name="l00228"></a><span class="lineno">  228</span>&#160;        UserFreePool(paceList);</div>
<div class="line"><a name="l00229"></a><span class="lineno">  229</span>&#160;        <span class="keywordflow">return</span> FALSE;</div>
<div class="line"><a name="l00230"></a><span class="lineno">  230</span>&#160;    }</div>
<div class="line"><a name="l00231"></a><span class="lineno">  231</span>&#160;    paceList = pace;</div>
<div class="line"><a name="l00232"></a><span class="lineno">  232</span>&#160; </div>
<div class="line"><a name="l00233"></a><span class="lineno">  233</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00234"></a><span class="lineno">  234</span>&#160;<span class="comment">     * Create the SD</span></div>
<div class="line"><a name="l00235"></a><span class="lineno">  235</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00236"></a><span class="lineno">  236</span>&#160;    <a class="code" href="a00839.html#ad04da95adc05d69c32d9d6b702c89489">gpsdInitWinSta</a> = <a class="code" href="a00839.html#a56fbb1227212dadeed7bcf9764bcb0bf">CreateSecurityDescriptor</a>(paceList, 4, dwLength, FALSE);</div>
<div class="line"><a name="l00237"></a><span class="lineno">  237</span>&#160;    UserFreePool(paceList);</div>
<div class="line"><a name="l00238"></a><span class="lineno">  238</span>&#160; </div>
<div class="line"><a name="l00239"></a><span class="lineno">  239</span>&#160;    <span class="keywordflow">if</span> (<a class="code" href="a00839.html#ad04da95adc05d69c32d9d6b702c89489">gpsdInitWinSta</a> == NULL) {</div>
<div class="line"><a name="l00240"></a><span class="lineno">  240</span>&#160;        <a class="code" href="a00371.html#a01c4659626880ba56745765a3580a36b">RIPMSG0</a>(<a class="code" href="a00371.html#a41f433389f20db57f042022a662e96de">RIP_WARNING</a>, <span class="stringliteral">&quot;Initial windowstation security was not created!&quot;</span>);</div>
<div class="line"><a name="l00241"></a><span class="lineno">  241</span>&#160;    }</div>
<div class="line"><a name="l00242"></a><span class="lineno">  242</span>&#160; </div>
<div class="line"><a name="l00243"></a><span class="lineno">  243</span>&#160;    <span class="keywordflow">return</span> (BOOL)(<a class="code" href="a00839.html#ad04da95adc05d69c32d9d6b702c89489">gpsdInitWinSta</a> != NULL);</div>
<div class="line"><a name="l00244"></a><span class="lineno">  244</span>&#160;}</div>
<div class="line"><a name="l00245"></a><span class="lineno">  245</span>&#160; </div>
<div class="line"><a name="l00246"></a><span class="lineno">  246</span>&#160; </div>
<div class="line"><a name="l00247"></a><span class="lineno">  247</span>&#160; </div>
<div class="line"><a name="l00257"></a><span class="lineno">  257</span>&#160;NTSTATUS</div>
<div class="line"><a name="l00258"></a><span class="lineno"><a class="line" href="a00839.html#a37058e8b761a27eb3d428f1f5a567928">  258</a></span>&#160;<a class="code" href="a00839.html#a37058e8b761a27eb3d428f1f5a567928">TestForInteractiveUser</a>(</div>
<div class="line"><a name="l00259"></a><span class="lineno">  259</span>&#160;    PLUID pluidCaller</div>
<div class="line"><a name="l00260"></a><span class="lineno">  260</span>&#160;    )</div>
<div class="line"><a name="l00261"></a><span class="lineno">  261</span>&#160;{</div>
<div class="line"><a name="l00262"></a><span class="lineno">  262</span>&#160;    <a class="code" href="a02809.html">PWINDOWSTATION</a> pwinsta;</div>
<div class="line"><a name="l00263"></a><span class="lineno">  263</span>&#160; </div>
<div class="line"><a name="l00264"></a><span class="lineno">  264</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00265"></a><span class="lineno">  265</span>&#160;<span class="comment">     * !!!</span></div>
<div class="line"><a name="l00266"></a><span class="lineno">  266</span>&#160;<span class="comment">     *</span></div>
<div class="line"><a name="l00267"></a><span class="lineno">  267</span>&#160;<span class="comment">     * This relies on the fact that there is only ONE interactive</span></div>
<div class="line"><a name="l00268"></a><span class="lineno">  268</span>&#160;<span class="comment">     * windowstation and that it is the first one in the list.</span></div>
<div class="line"><a name="l00269"></a><span class="lineno">  269</span>&#160;<span class="comment">     * If multiple windowstations are ever supported</span></div>
<div class="line"><a name="l00270"></a><span class="lineno">  270</span>&#160;<span class="comment">     * a lookup will have to be done here.</span></div>
<div class="line"><a name="l00271"></a><span class="lineno">  271</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00272"></a><span class="lineno">  272</span>&#160;    pwinsta = <a class="code" href="a03257.html#ad9f551216ba73947832de96844110fca">grpwinstaList</a>;</div>
<div class="line"><a name="l00273"></a><span class="lineno">  273</span>&#160; </div>
<div class="line"><a name="l00274"></a><span class="lineno">  274</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00275"></a><span class="lineno">  275</span>&#160;<span class="comment">     * Compare it with the id of the logged on user.</span></div>
<div class="line"><a name="l00276"></a><span class="lineno">  276</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00277"></a><span class="lineno">  277</span>&#160;    <span class="keywordflow">if</span> (RtlEqualLuid(pluidCaller, &amp;pwinsta-&gt;<a class="code" href="a02809.html#a384d45dfef3f95188b5c7a7a09213d35">luidUser</a>))</div>
<div class="line"><a name="l00278"></a><span class="lineno">  278</span>&#160;        <span class="keywordflow">return</span> STATUS_SUCCESS;</div>
<div class="line"><a name="l00279"></a><span class="lineno">  279</span>&#160;    <span class="keywordflow">else</span></div>
<div class="line"><a name="l00280"></a><span class="lineno">  280</span>&#160;        <span class="keywordflow">return</span> STATUS_ACCESS_DENIED;</div>
<div class="line"><a name="l00281"></a><span class="lineno">  281</span>&#160;}</div>
<div class="line"><a name="l00282"></a><span class="lineno">  282</span>&#160; </div>
<div class="line"><a name="l00283"></a><span class="lineno">  283</span>&#160; </div>
<div class="line"><a name="l00284"></a><span class="lineno">  284</span>&#160; </div>
<div class="line"><a name="l00285"></a><span class="lineno">  285</span>&#160; </div>
<div class="line"><a name="l00295"></a><span class="lineno">  295</span>&#160;NTSTATUS</div>
<div class="line"><a name="l00296"></a><span class="lineno"><a class="line" href="a00899.html#aee1b6f2046e16e101286ca457345406d">  296</a></span>&#160;<a class="code" href="a00839.html#aee1b6f2046e16e101286ca457345406d">_UserTestForWinStaAccess</a>(</div>
<div class="line"><a name="l00297"></a><span class="lineno">  297</span>&#160;    PUNICODE_STRING pstrWinSta,</div>
<div class="line"><a name="l00298"></a><span class="lineno">  298</span>&#160;    BOOL fInherit</div>
<div class="line"><a name="l00299"></a><span class="lineno">  299</span>&#160;    )</div>
<div class="line"><a name="l00300"></a><span class="lineno">  300</span>&#160;{</div>
<div class="line"><a name="l00301"></a><span class="lineno">  301</span>&#160; </div>
<div class="line"><a name="l00302"></a><span class="lineno">  302</span>&#160;    PTOKEN_STATISTICS pStats;</div>
<div class="line"><a name="l00303"></a><span class="lineno">  303</span>&#160;    ULONG BytesRequired;</div>
<div class="line"><a name="l00304"></a><span class="lineno">  304</span>&#160;    <a class="code" href="a02809.html">PWINDOWSTATION</a> pwinsta;</div>
<div class="line"><a name="l00305"></a><span class="lineno">  305</span>&#160;    HWINSTA        hwsta = NULL;</div>
<div class="line"><a name="l00306"></a><span class="lineno">  306</span>&#160;    POBJECT_ATTRIBUTES ObjAttr = NULL;</div>
<div class="line"><a name="l00307"></a><span class="lineno">  307</span>&#160;    NTSTATUS Status =  STATUS_SUCCESS;</div>
<div class="line"><a name="l00308"></a><span class="lineno">  308</span>&#160;    NTSTATUS NtStatust ;</div>
<div class="line"><a name="l00309"></a><span class="lineno">  309</span>&#160;    <a class="code" href="a00563.html#a074685e97e89d6aa2accdfcb82328699">DWORD</a>              cbObjA;</div>
<div class="line"><a name="l00310"></a><span class="lineno">  310</span>&#160;    UNICODE_STRING     strDefWinSta;</div>
<div class="line"><a name="l00311"></a><span class="lineno">  311</span>&#160;    HANDLE htoken;</div>
<div class="line"><a name="l00312"></a><span class="lineno">  312</span>&#160;    LUID SystemLuid = SYSTEM_LUID;</div>
<div class="line"><a name="l00313"></a><span class="lineno">  313</span>&#160; </div>
<div class="line"><a name="l00314"></a><span class="lineno">  314</span>&#160;    CheckCritIn();</div>
<div class="line"><a name="l00315"></a><span class="lineno">  315</span>&#160; </div>
<div class="line"><a name="l00316"></a><span class="lineno">  316</span>&#160; </div>
<div class="line"><a name="l00317"></a><span class="lineno">  317</span>&#160; </div>
<div class="line"><a name="l00318"></a><span class="lineno">  318</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00319"></a><span class="lineno">  319</span>&#160;<span class="comment">     * If we are testing against Default WindowStation (WinSta0) retreive</span></div>
<div class="line"><a name="l00320"></a><span class="lineno">  320</span>&#160;<span class="comment">     * pwinsta from the top of the grpwinstaList instead of doing an</span></div>
<div class="line"><a name="l00321"></a><span class="lineno">  321</span>&#160;<span class="comment">     * OpenWindowStation()</span></div>
<div class="line"><a name="l00322"></a><span class="lineno">  322</span>&#160;<span class="comment">     *</span></div>
<div class="line"><a name="l00323"></a><span class="lineno">  323</span>&#160;<span class="comment">     * !!!</span></div>
<div class="line"><a name="l00324"></a><span class="lineno">  324</span>&#160;<span class="comment">     *</span></div>
<div class="line"><a name="l00325"></a><span class="lineno">  325</span>&#160;<span class="comment">     * This relies on the fact that there is only ONE interactive</span></div>
<div class="line"><a name="l00326"></a><span class="lineno">  326</span>&#160;<span class="comment">     * windowstation and that it is the first one in the list.</span></div>
<div class="line"><a name="l00327"></a><span class="lineno">  327</span>&#160;<span class="comment">     * If multiple windowstations are ever supported</span></div>
<div class="line"><a name="l00328"></a><span class="lineno">  328</span>&#160;<span class="comment">     * a lookup will have to be done instead.</span></div>
<div class="line"><a name="l00329"></a><span class="lineno">  329</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00330"></a><span class="lineno">  330</span>&#160;    RtlInitUnicodeString(&amp;strDefWinSta,DEFAULT_WINSTA);</div>
<div class="line"><a name="l00331"></a><span class="lineno">  331</span>&#160;    <span class="keywordflow">if</span> (RtlEqualUnicodeString(pstrWinSta,&amp;strDefWinSta,TRUE)) {</div>
<div class="line"><a name="l00332"></a><span class="lineno">  332</span>&#160;        <span class="comment">//WinSta0 is at the top of the grpwinstaList</span></div>
<div class="line"><a name="l00333"></a><span class="lineno">  333</span>&#160;        pwinsta = <a class="code" href="a03257.html#ad9f551216ba73947832de96844110fca">grpwinstaList</a>;</div>
<div class="line"><a name="l00334"></a><span class="lineno">  334</span>&#160; </div>
<div class="line"><a name="l00335"></a><span class="lineno">  335</span>&#160; </div>
<div class="line"><a name="l00336"></a><span class="lineno">  336</span>&#160;        <span class="keywordflow">if</span> (!NT_SUCCESS(Status = <a class="code" href="a00680.html#a80a4bdd9ccbc04bf79c9c3e18860adfd">OpenEffectiveToken</a>(&amp;htoken))) {</div>
<div class="line"><a name="l00337"></a><span class="lineno">  337</span>&#160;            <span class="keywordflow">return</span> Status;</div>
<div class="line"><a name="l00338"></a><span class="lineno">  338</span>&#160;        }</div>
<div class="line"><a name="l00339"></a><span class="lineno">  339</span>&#160; </div>
<div class="line"><a name="l00340"></a><span class="lineno">  340</span>&#160;        Status = ZwQueryInformationToken(</div>
<div class="line"><a name="l00341"></a><span class="lineno">  341</span>&#160;                     htoken,                 <span class="comment">// Handle</span></div>
<div class="line"><a name="l00342"></a><span class="lineno">  342</span>&#160;                     TokenStatistics,           <span class="comment">// TokenInformationClass</span></div>
<div class="line"><a name="l00343"></a><span class="lineno">  343</span>&#160;                     NULL,                      <span class="comment">// TokenInformation</span></div>
<div class="line"><a name="l00344"></a><span class="lineno">  344</span>&#160;                     0,                         <span class="comment">// TokenInformationLength</span></div>
<div class="line"><a name="l00345"></a><span class="lineno">  345</span>&#160;                     &amp;BytesRequired             <span class="comment">// ReturnLength</span></div>
<div class="line"><a name="l00346"></a><span class="lineno">  346</span>&#160;                     );</div>
<div class="line"><a name="l00347"></a><span class="lineno">  347</span>&#160; </div>
<div class="line"><a name="l00348"></a><span class="lineno">  348</span>&#160;        <span class="keywordflow">if</span> (Status != STATUS_BUFFER_TOO_SMALL) {</div>
<div class="line"><a name="l00349"></a><span class="lineno">  349</span>&#160;            ZwClose(htoken);</div>
<div class="line"><a name="l00350"></a><span class="lineno">  350</span>&#160;            <span class="keywordflow">return</span> Status;</div>
<div class="line"><a name="l00351"></a><span class="lineno">  351</span>&#160;        }</div>
<div class="line"><a name="l00352"></a><span class="lineno">  352</span>&#160; </div>
<div class="line"><a name="l00353"></a><span class="lineno">  353</span>&#160;        <span class="comment">//</span></div>
<div class="line"><a name="l00354"></a><span class="lineno">  354</span>&#160;        <span class="comment">// Allocate space for the user info</span></div>
<div class="line"><a name="l00355"></a><span class="lineno">  355</span>&#160;        <span class="comment">//</span></div>
<div class="line"><a name="l00356"></a><span class="lineno">  356</span>&#160; </div>
<div class="line"><a name="l00357"></a><span class="lineno">  357</span>&#160;        pStats = (PTOKEN_STATISTICS)UserAllocPoolWithQuota(BytesRequired, TAG_SECURITY);</div>
<div class="line"><a name="l00358"></a><span class="lineno">  358</span>&#160;        <span class="keywordflow">if</span> (pStats == NULL) {</div>
<div class="line"><a name="l00359"></a><span class="lineno">  359</span>&#160;            Status = STATUS_NO_MEMORY;</div>
<div class="line"><a name="l00360"></a><span class="lineno">  360</span>&#160;            ZwClose(htoken);</div>
<div class="line"><a name="l00361"></a><span class="lineno">  361</span>&#160;            <span class="keywordflow">return</span> Status;</div>
<div class="line"><a name="l00362"></a><span class="lineno">  362</span>&#160;        }</div>
<div class="line"><a name="l00363"></a><span class="lineno">  363</span>&#160; </div>
<div class="line"><a name="l00364"></a><span class="lineno">  364</span>&#160;        <span class="comment">//</span></div>
<div class="line"><a name="l00365"></a><span class="lineno">  365</span>&#160;        <span class="comment">// Read in the user info</span></div>
<div class="line"><a name="l00366"></a><span class="lineno">  366</span>&#160;        <span class="comment">//</span></div>
<div class="line"><a name="l00367"></a><span class="lineno">  367</span>&#160; </div>
<div class="line"><a name="l00368"></a><span class="lineno">  368</span>&#160;        <span class="keywordflow">if</span> (!NT_SUCCESS(Status = ZwQueryInformationToken(</div>
<div class="line"><a name="l00369"></a><span class="lineno">  369</span>&#160;                     htoken,             <span class="comment">// Handle</span></div>
<div class="line"><a name="l00370"></a><span class="lineno">  370</span>&#160;                     TokenStatistics,       <span class="comment">// TokenInformationClass</span></div>
<div class="line"><a name="l00371"></a><span class="lineno">  371</span>&#160;                     pStats,                <span class="comment">// TokenInformation</span></div>
<div class="line"><a name="l00372"></a><span class="lineno">  372</span>&#160;                     BytesRequired,         <span class="comment">// TokenInformationLength</span></div>
<div class="line"><a name="l00373"></a><span class="lineno">  373</span>&#160;                     &amp;BytesRequired         <span class="comment">// ReturnLength</span></div>
<div class="line"><a name="l00374"></a><span class="lineno">  374</span>&#160;                     ))) {</div>
<div class="line"><a name="l00375"></a><span class="lineno">  375</span>&#160;            ZwClose(htoken);</div>
<div class="line"><a name="l00376"></a><span class="lineno">  376</span>&#160;            UserFreePool(pStats);</div>
<div class="line"><a name="l00377"></a><span class="lineno">  377</span>&#160;            <span class="keywordflow">return</span> Status;</div>
<div class="line"><a name="l00378"></a><span class="lineno">  378</span>&#160;        }</div>
<div class="line"><a name="l00379"></a><span class="lineno">  379</span>&#160; </div>
<div class="line"><a name="l00380"></a><span class="lineno">  380</span>&#160;       <span class="comment">/*</span></div>
<div class="line"><a name="l00381"></a><span class="lineno">  381</span>&#160;<span class="comment">        * Make sure that current process has access to this window station</span></div>
<div class="line"><a name="l00382"></a><span class="lineno">  382</span>&#160;<span class="comment">        *</span></div>
<div class="line"><a name="l00383"></a><span class="lineno">  383</span>&#160;<span class="comment">        */</span></div>
<div class="line"><a name="l00384"></a><span class="lineno">  384</span>&#160; </div>
<div class="line"><a name="l00385"></a><span class="lineno">  385</span>&#160;        Status = STATUS_ACCESS_DENIED;</div>
<div class="line"><a name="l00386"></a><span class="lineno">  386</span>&#160;        <span class="keywordflow">if</span>(fInherit) {</div>
<div class="line"><a name="l00387"></a><span class="lineno">  387</span>&#160;            <span class="keywordflow">if</span> ( (RtlEqualLuid(&amp;pStats-&gt;AuthenticationId, &amp;pwinsta-&gt;<a class="code" href="a02809.html#a384d45dfef3f95188b5c7a7a09213d35">luidUser</a>)) ||</div>
<div class="line"><a name="l00388"></a><span class="lineno">  388</span>&#160;                 (RtlEqualLuid(&amp;pStats-&gt;AuthenticationId, &amp;SystemLuid)) ||</div>
<div class="line"><a name="l00389"></a><span class="lineno">  389</span>&#160;                 (<a class="code" href="a00839.html#a9f78afc46aa1b978b1ad2b0922e998e1">AccessCheckObject</a>(pwinsta,GENERIC_EXECUTE)) )  {</div>
<div class="line"><a name="l00390"></a><span class="lineno">  390</span>&#160;               Status = STATUS_SUCCESS;</div>
<div class="line"><a name="l00391"></a><span class="lineno">  391</span>&#160;            }</div>
<div class="line"><a name="l00392"></a><span class="lineno">  392</span>&#160; </div>
<div class="line"><a name="l00393"></a><span class="lineno">  393</span>&#160;        }</div>
<div class="line"><a name="l00394"></a><span class="lineno">  394</span>&#160;        <span class="keywordflow">else</span> {</div>
<div class="line"><a name="l00395"></a><span class="lineno">  395</span>&#160;            <span class="comment">/* Bug 42905. Service Controller clears the flag</span></div>
<div class="line"><a name="l00396"></a><span class="lineno">  396</span>&#160;<span class="comment">             * ScStartupInfo.dwFlags &amp;= (~STARTF_DESKTOPINHERIT) to make services</span></div>
<div class="line"><a name="l00397"></a><span class="lineno">  397</span>&#160;<span class="comment">             * running under the context of system non-interactive. Hence if fInherit</span></div>
<div class="line"><a name="l00398"></a><span class="lineno">  398</span>&#160;<span class="comment">             * is false don&#39;t do the SystemLuid and AccessCheckObject tests.</span></div>
<div class="line"><a name="l00399"></a><span class="lineno">  399</span>&#160;<span class="comment">             */</span></div>
<div class="line"><a name="l00400"></a><span class="lineno">  400</span>&#160; </div>
<div class="line"><a name="l00401"></a><span class="lineno">  401</span>&#160;            <span class="keywordflow">if</span>  (RtlEqualLuid(&amp;pStats-&gt;AuthenticationId, &amp;pwinsta-&gt;<a class="code" href="a02809.html#a384d45dfef3f95188b5c7a7a09213d35">luidUser</a>)) {</div>
<div class="line"><a name="l00402"></a><span class="lineno">  402</span>&#160;               Status = STATUS_SUCCESS;</div>
<div class="line"><a name="l00403"></a><span class="lineno">  403</span>&#160;            }</div>
<div class="line"><a name="l00404"></a><span class="lineno">  404</span>&#160; </div>
<div class="line"><a name="l00405"></a><span class="lineno">  405</span>&#160;        }</div>
<div class="line"><a name="l00406"></a><span class="lineno">  406</span>&#160; </div>
<div class="line"><a name="l00407"></a><span class="lineno">  407</span>&#160;        ZwClose(htoken);</div>
<div class="line"><a name="l00408"></a><span class="lineno">  408</span>&#160;        UserFreePool(pStats);</div>
<div class="line"><a name="l00409"></a><span class="lineno">  409</span>&#160;        <span class="keywordflow">return</span> Status;</div>
<div class="line"><a name="l00410"></a><span class="lineno">  410</span>&#160;    }</div>
<div class="line"><a name="l00411"></a><span class="lineno">  411</span>&#160; </div>
<div class="line"><a name="l00412"></a><span class="lineno">  412</span>&#160; </div>
<div class="line"><a name="l00413"></a><span class="lineno">  413</span>&#160; </div>
<div class="line"><a name="l00414"></a><span class="lineno">  414</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00415"></a><span class="lineno">  415</span>&#160;<span class="comment">     * Since we don&#39;t have a pointer to the WindowStation Object we will do</span></div>
<div class="line"><a name="l00416"></a><span class="lineno">  416</span>&#160;<span class="comment">     * a OpenWindowStation() to make sure we have the desired access.</span></div>
<div class="line"><a name="l00417"></a><span class="lineno">  417</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00418"></a><span class="lineno">  418</span>&#160; </div>
<div class="line"><a name="l00419"></a><span class="lineno">  419</span>&#160;    cbObjA = <span class="keyword">sizeof</span>(*ObjAttr);</div>
<div class="line"><a name="l00420"></a><span class="lineno">  420</span>&#160;    <span class="keywordflow">if</span> (NT_SUCCESS(Status = ZwAllocateVirtualMemory(NtCurrentProcess(),</div>
<div class="line"><a name="l00421"></a><span class="lineno">  421</span>&#160;                    &amp;ObjAttr, 0, &amp;cbObjA, MEM_COMMIT, PAGE_READWRITE))) {</div>
<div class="line"><a name="l00422"></a><span class="lineno">  422</span>&#160;        InitializeObjectAttributes( ObjAttr,</div>
<div class="line"><a name="l00423"></a><span class="lineno">  423</span>&#160;                                    pstrWinSta,</div>
<div class="line"><a name="l00424"></a><span class="lineno">  424</span>&#160;                                    OBJ_CASE_INSENSITIVE,</div>
<div class="line"><a name="l00425"></a><span class="lineno">  425</span>&#160;                                    NULL,</div>
<div class="line"><a name="l00426"></a><span class="lineno">  426</span>&#160;                                    NULL</div>
<div class="line"><a name="l00427"></a><span class="lineno">  427</span>&#160;                                    );</div>
<div class="line"><a name="l00428"></a><span class="lineno">  428</span>&#160; </div>
<div class="line"><a name="l00429"></a><span class="lineno">  429</span>&#160;        hwsta = <a class="code" href="a00899.html#a0c5a8a788cfe53b3b6a461f1bb9ef631">_OpenWindowStation</a>(ObjAttr, GENERIC_EXECUTE);</div>
<div class="line"><a name="l00430"></a><span class="lineno">  430</span>&#160;    } <span class="keywordflow">else</span> {</div>
<div class="line"><a name="l00431"></a><span class="lineno">  431</span>&#160;        <span class="keywordflow">return</span> Status;</div>
<div class="line"><a name="l00432"></a><span class="lineno">  432</span>&#160;    }</div>
<div class="line"><a name="l00433"></a><span class="lineno">  433</span>&#160; </div>
<div class="line"><a name="l00434"></a><span class="lineno">  434</span>&#160;    <span class="keywordflow">if</span> (ObjAttr != NULL) {</div>
<div class="line"><a name="l00435"></a><span class="lineno">  435</span>&#160;        ZwFreeVirtualMemory(NtCurrentProcess(), &amp;ObjAttr, &amp;cbObjA,</div>
<div class="line"><a name="l00436"></a><span class="lineno">  436</span>&#160;                        MEM_RELEASE);</div>
<div class="line"><a name="l00437"></a><span class="lineno">  437</span>&#160;    }</div>
<div class="line"><a name="l00438"></a><span class="lineno">  438</span>&#160; </div>
<div class="line"><a name="l00439"></a><span class="lineno">  439</span>&#160; </div>
<div class="line"><a name="l00440"></a><span class="lineno">  440</span>&#160;    <span class="keywordflow">if</span> (!hwsta) {</div>
<div class="line"><a name="l00441"></a><span class="lineno">  441</span>&#160;        Status = STATUS_ACCESS_DENIED;</div>
<div class="line"><a name="l00442"></a><span class="lineno">  442</span>&#160;        <span class="keywordflow">return</span> Status;</div>
<div class="line"><a name="l00443"></a><span class="lineno">  443</span>&#160;    }</div>
<div class="line"><a name="l00444"></a><span class="lineno">  444</span>&#160; </div>
<div class="line"><a name="l00445"></a><span class="lineno">  445</span>&#160; </div>
<div class="line"><a name="l00446"></a><span class="lineno">  446</span>&#160;    NtStatust = ZwClose(hwsta);</div>
<div class="line"><a name="l00447"></a><span class="lineno">  447</span>&#160;    <a class="code" href="a00371.html#a162a73e20dfabca084a3ebb4581631a8">UserAssert</a>(NtStatust == STATUS_SUCCESS);</div>
<div class="line"><a name="l00448"></a><span class="lineno">  448</span>&#160;    <span class="keywordflow">return</span> Status;</div>
<div class="line"><a name="l00449"></a><span class="lineno">  449</span>&#160;}</div>
<div class="line"><a name="l00450"></a><span class="lineno">  450</span>&#160; </div>
<div class="line"><a name="l00459"></a><span class="lineno"><a class="line" href="a00899.html#abea1e7b0584ee2735d8ef1570833d316">  459</a></span>&#160;BOOL <a class="code" href="a00839.html#a099bb06ddaffa8360a390372c20cd010">CheckGrantedAccess</a>(</div>
<div class="line"><a name="l00460"></a><span class="lineno">  460</span>&#160;    ACCESS_MASK amGranted,</div>
<div class="line"><a name="l00461"></a><span class="lineno">  461</span>&#160;    ACCESS_MASK amRequest)</div>
<div class="line"><a name="l00462"></a><span class="lineno">  462</span>&#160;{</div>
<div class="line"><a name="l00463"></a><span class="lineno">  463</span>&#160; </div>
<div class="line"><a name="l00464"></a><span class="lineno">  464</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00465"></a><span class="lineno">  465</span>&#160;<span class="comment">     * Check the granted access.</span></div>
<div class="line"><a name="l00466"></a><span class="lineno">  466</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00467"></a><span class="lineno">  467</span>&#160;    <span class="keywordflow">if</span> (!RtlAreAllAccessesGranted(amGranted, amRequest)) {</div>
<div class="line"><a name="l00468"></a><span class="lineno">  468</span>&#160;        <a class="code" href="a00371.html#ae61d954062a9ece52e350e54cad9a23d">RIPERR0</a>(ERROR_ACCESS_DENIED, <a class="code" href="a00371.html#ad6b24a3d61abdc148c8751b5c5add686">RIP_VERBOSE</a>, <span class="stringliteral">&quot;&quot;</span>);</div>
<div class="line"><a name="l00469"></a><span class="lineno">  469</span>&#160;        <span class="keywordflow">return</span> FALSE;</div>
<div class="line"><a name="l00470"></a><span class="lineno">  470</span>&#160;    }</div>
<div class="line"><a name="l00471"></a><span class="lineno">  471</span>&#160;    <span class="keywordflow">return</span> TRUE;</div>
<div class="line"><a name="l00472"></a><span class="lineno">  472</span>&#160;}</div>
<div class="line"><a name="l00473"></a><span class="lineno">  473</span>&#160; </div>
<div class="line"><a name="l00474"></a><span class="lineno">  474</span>&#160; </div>
<div class="line"><a name="l00485"></a><span class="lineno"><a class="line" href="a00899.html#a14fe1eb47a22ba1b713ca76ddf4180af">  485</a></span>&#160;BOOL <a class="code" href="a00839.html#a14fe1eb47a22ba1b713ca76ddf4180af">CheckWinstaWriteAttributesAccess</a>(<span class="keywordtype">void</span>)</div>
<div class="line"><a name="l00486"></a><span class="lineno">  486</span>&#160;{</div>
<div class="line"><a name="l00487"></a><span class="lineno">  487</span>&#160;    <a class="code" href="a02905.html">PPROCESSINFO</a>    ppiCurrent = PpiCurrent();</div>
<div class="line"><a name="l00488"></a><span class="lineno">  488</span>&#160; </div>
<div class="line"><a name="l00489"></a><span class="lineno">  489</span>&#160;    <span class="keywordflow">if</span> (!RtlAreAllAccessesGranted(ppiCurrent-&gt;<a class="code" href="a02905.html#a31c3805f3b611723d2ce7b28d87c6859">amwinsta</a>, WINSTA_WRITEATTRIBUTES)) {</div>
<div class="line"><a name="l00490"></a><span class="lineno">  490</span>&#160;        <a class="code" href="a00371.html#ae61d954062a9ece52e350e54cad9a23d">RIPERR0</a>(ERROR_ACCESS_DENIED,</div>
<div class="line"><a name="l00491"></a><span class="lineno">  491</span>&#160;                <a class="code" href="a00371.html#a41f433389f20db57f042022a662e96de">RIP_WARNING</a>,</div>
<div class="line"><a name="l00492"></a><span class="lineno">  492</span>&#160;                <span class="stringliteral">&quot;WINSTA_WRITEATTRIBUTES access to WindowStation denied.&quot;</span>);</div>
<div class="line"><a name="l00493"></a><span class="lineno">  493</span>&#160; </div>
<div class="line"><a name="l00494"></a><span class="lineno">  494</span>&#160;        <span class="keywordflow">return</span> FALSE;</div>
<div class="line"><a name="l00495"></a><span class="lineno">  495</span>&#160;    }</div>
<div class="line"><a name="l00496"></a><span class="lineno">  496</span>&#160; </div>
<div class="line"><a name="l00497"></a><span class="lineno">  497</span>&#160;    <span class="keywordflow">if</span> (!(ppiCurrent-&gt;W32PF_Flags &amp; W32PF_IOWINSTA)) {</div>
<div class="line"><a name="l00498"></a><span class="lineno">  498</span>&#160;        <a class="code" href="a00371.html#ae61d954062a9ece52e350e54cad9a23d">RIPERR0</a>(ERROR_REQUIRES_INTERACTIVE_WINDOWSTATION,</div>
<div class="line"><a name="l00499"></a><span class="lineno">  499</span>&#160;                <a class="code" href="a00371.html#a41f433389f20db57f042022a662e96de">RIP_WARNING</a>,</div>
<div class="line"><a name="l00500"></a><span class="lineno">  500</span>&#160;                <span class="stringliteral">&quot;Operation invalid on a non-interactive WindowStation.&quot;</span>);</div>
<div class="line"><a name="l00501"></a><span class="lineno">  501</span>&#160; </div>
<div class="line"><a name="l00502"></a><span class="lineno">  502</span>&#160;        <span class="keywordflow">return</span> FALSE;</div>
<div class="line"><a name="l00503"></a><span class="lineno">  503</span>&#160;    }</div>
<div class="line"><a name="l00504"></a><span class="lineno">  504</span>&#160; </div>
<div class="line"><a name="l00505"></a><span class="lineno">  505</span>&#160;    <span class="keywordflow">return</span> TRUE;</div>
<div class="line"><a name="l00506"></a><span class="lineno">  506</span>&#160;}</div>
<div class="line"><a name="l00507"></a><span class="lineno">  507</span>&#160; </div>
<div class="line"><a name="l00508"></a><span class="lineno">  508</span>&#160; </div>
<div class="line"><a name="l00517"></a><span class="lineno"><a class="line" href="a00899.html#a689592e25bd83ffd53107bcdb80fb936">  517</a></span>&#160;BOOL <a class="code" href="a00839.html#a9f78afc46aa1b978b1ad2b0922e998e1">AccessCheckObject</a>(</div>
<div class="line"><a name="l00518"></a><span class="lineno">  518</span>&#160;    PVOID pobj,</div>
<div class="line"><a name="l00519"></a><span class="lineno">  519</span>&#160;    ACCESS_MASK amRequest)</div>
<div class="line"><a name="l00520"></a><span class="lineno">  520</span>&#160;{</div>
<div class="line"><a name="l00521"></a><span class="lineno">  521</span>&#160;    NTSTATUS Status;</div>
<div class="line"><a name="l00522"></a><span class="lineno">  522</span>&#160;    ACCESS_STATE AccessState;</div>
<div class="line"><a name="l00523"></a><span class="lineno">  523</span>&#160;    BOOLEAN fAccessGranted;</div>
<div class="line"><a name="l00524"></a><span class="lineno">  524</span>&#160;    POBJECT_HEADER pHead;</div>
<div class="line"><a name="l00525"></a><span class="lineno">  525</span>&#160;    PGENERIC_MAPPING pGenericMapping;</div>
<div class="line"><a name="l00526"></a><span class="lineno">  526</span>&#160;    AUX_ACCESS_DATA AuxData;</div>
<div class="line"><a name="l00527"></a><span class="lineno">  527</span>&#160; </div>
<div class="line"><a name="l00528"></a><span class="lineno">  528</span>&#160;    pHead = OBJECT_TO_OBJECT_HEADER(pobj);</div>
<div class="line"><a name="l00529"></a><span class="lineno">  529</span>&#160;    <span class="keywordflow">if</span> (pHead-&gt;Type == *<a class="code" href="a00899.html#a23e8283bc242953b172d97079c117f38">ExWindowStationObjectType</a>) {</div>
<div class="line"><a name="l00530"></a><span class="lineno">  530</span>&#160;        pGenericMapping = &amp;<a class="code" href="a00839.html#adc61ef551cf8e713e7f0014b5932ffcd">WinStaMapping</a>;</div>
<div class="line"><a name="l00531"></a><span class="lineno">  531</span>&#160;    } <span class="keywordflow">else</span> {</div>
<div class="line"><a name="l00532"></a><span class="lineno">  532</span>&#160;        pGenericMapping = &amp;<a class="code" href="a00839.html#aa43121e2fd14c10e80b0025f77eb3a00">DesktopMapping</a>;</div>
<div class="line"><a name="l00533"></a><span class="lineno">  533</span>&#160;    }</div>
<div class="line"><a name="l00534"></a><span class="lineno">  534</span>&#160;    SeCreateAccessState(&amp;AccessState, &amp;AuxData, amRequest, pGenericMapping);</div>
<div class="line"><a name="l00535"></a><span class="lineno">  535</span>&#160;    fAccessGranted = ObCheckObjectAccess(</div>
<div class="line"><a name="l00536"></a><span class="lineno">  536</span>&#160;            pobj,</div>
<div class="line"><a name="l00537"></a><span class="lineno">  537</span>&#160;            &amp;AccessState,</div>
<div class="line"><a name="l00538"></a><span class="lineno">  538</span>&#160;            FALSE,</div>
<div class="line"><a name="l00539"></a><span class="lineno">  539</span>&#160;            KeGetPreviousMode(),</div>
<div class="line"><a name="l00540"></a><span class="lineno">  540</span>&#160;            &amp;Status);</div>
<div class="line"><a name="l00541"></a><span class="lineno">  541</span>&#160;    SeDeleteAccessState(&amp;AccessState);</div>
<div class="line"><a name="l00542"></a><span class="lineno">  542</span>&#160;    <span class="keywordflow">return</span> (BOOL)(fAccessGranted == TRUE);</div>
<div class="line"><a name="l00543"></a><span class="lineno">  543</span>&#160;}</div>
<div class="line"><a name="l00544"></a><span class="lineno">  544</span>&#160; </div>
<div class="line"><a name="l00545"></a><span class="lineno">  545</span>&#160; </div>
<div class="line"><a name="l00554"></a><span class="lineno"><a class="line" href="a00899.html#ad5164087ca1b77435e44c75a73c0538f">  554</a></span>&#160;BOOL <a class="code" href="a00839.html#ad5164087ca1b77435e44c75a73c0538f">IsPrivileged</a>(</div>
<div class="line"><a name="l00555"></a><span class="lineno">  555</span>&#160;    PPRIVILEGE_SET ppSet)</div>
<div class="line"><a name="l00556"></a><span class="lineno">  556</span>&#160;{</div>
<div class="line"><a name="l00557"></a><span class="lineno">  557</span>&#160;    SECURITY_SUBJECT_CONTEXT Context;</div>
<div class="line"><a name="l00558"></a><span class="lineno">  558</span>&#160;    BOOLEAN bHeld;</div>
<div class="line"><a name="l00559"></a><span class="lineno">  559</span>&#160; </div>
<div class="line"><a name="l00560"></a><span class="lineno">  560</span>&#160;    SeCaptureSubjectContext(&amp;Context);</div>
<div class="line"><a name="l00561"></a><span class="lineno">  561</span>&#160;    SeLockSubjectContext(&amp;Context);</div>
<div class="line"><a name="l00562"></a><span class="lineno">  562</span>&#160; </div>
<div class="line"><a name="l00563"></a><span class="lineno">  563</span>&#160;    bHeld = SePrivilegeCheck(ppSet, &amp;Context, UserMode);</div>
<div class="line"><a name="l00564"></a><span class="lineno">  564</span>&#160;    SePrivilegeObjectAuditAlarm(NULL, &amp;Context, 0, ppSet, bHeld, UserMode);</div>
<div class="line"><a name="l00565"></a><span class="lineno">  565</span>&#160; </div>
<div class="line"><a name="l00566"></a><span class="lineno">  566</span>&#160;    SeUnlockSubjectContext(&amp;Context);</div>
<div class="line"><a name="l00567"></a><span class="lineno">  567</span>&#160;    SeReleaseSubjectContext(&amp;Context);</div>
<div class="line"><a name="l00568"></a><span class="lineno">  568</span>&#160; </div>
<div class="line"><a name="l00569"></a><span class="lineno">  569</span>&#160;    <span class="keywordflow">if</span> (!bHeld)</div>
<div class="line"><a name="l00570"></a><span class="lineno">  570</span>&#160;        <a class="code" href="a00371.html#ae61d954062a9ece52e350e54cad9a23d">RIPERR0</a>(ERROR_PRIVILEGE_NOT_HELD, <a class="code" href="a00371.html#ad6b24a3d61abdc148c8751b5c5add686">RIP_VERBOSE</a>, <span class="stringliteral">&quot;&quot;</span>);</div>
<div class="line"><a name="l00571"></a><span class="lineno">  571</span>&#160; </div>
<div class="line"><a name="l00572"></a><span class="lineno">  572</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00573"></a><span class="lineno">  573</span>&#160;<span class="comment">     * Return result of privilege check</span></div>
<div class="line"><a name="l00574"></a><span class="lineno">  574</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00575"></a><span class="lineno">  575</span>&#160;    <span class="keywordflow">return</span> (BOOL)bHeld;</div>
<div class="line"><a name="l00576"></a><span class="lineno">  576</span>&#160;}</div>
<div class="line"><a name="l00577"></a><span class="lineno">  577</span>&#160; </div>
<div class="line"><a name="l00578"></a><span class="lineno">  578</span>&#160; </div>
<div class="line"><a name="l00587"></a><span class="lineno"><a class="line" href="a00899.html#a952a73fcd6fbe1ccb97718b33796e4be">  587</a></span>&#160;BOOL <a class="code" href="a00839.html#a952a73fcd6fbe1ccb97718b33796e4be">_GetUserObjectInformation</a>(</div>
<div class="line"><a name="l00588"></a><span class="lineno">  588</span>&#160;    HANDLE h,</div>
<div class="line"><a name="l00589"></a><span class="lineno">  589</span>&#160;    <span class="keywordtype">int</span> nIndex,</div>
<div class="line"><a name="l00590"></a><span class="lineno">  590</span>&#160;    PVOID pvInfo,</div>
<div class="line"><a name="l00591"></a><span class="lineno">  591</span>&#160;    <a class="code" href="a00563.html#a074685e97e89d6aa2accdfcb82328699">DWORD</a> nLength,</div>
<div class="line"><a name="l00592"></a><span class="lineno">  592</span>&#160;    LPDWORD lpnLengthNeeded)</div>
<div class="line"><a name="l00593"></a><span class="lineno">  593</span>&#160;{</div>
<div class="line"><a name="l00594"></a><span class="lineno">  594</span>&#160;    PUSEROBJECTFLAGS puof;</div>
<div class="line"><a name="l00595"></a><span class="lineno">  595</span>&#160;    BOOL fSuccess = TRUE;</div>
<div class="line"><a name="l00596"></a><span class="lineno">  596</span>&#160;    PVOID pObject;</div>
<div class="line"><a name="l00597"></a><span class="lineno">  597</span>&#160;    POBJECT_HEADER pHead;</div>
<div class="line"><a name="l00598"></a><span class="lineno">  598</span>&#160;    <a class="code" href="a00563.html#a074685e97e89d6aa2accdfcb82328699">DWORD</a> dwLengthNeeded = 0;</div>
<div class="line"><a name="l00599"></a><span class="lineno">  599</span>&#160;    OBJECT_HANDLE_INFORMATION ohi;</div>
<div class="line"><a name="l00600"></a><span class="lineno">  600</span>&#160;    PUNICODE_STRING pstrInfo;</div>
<div class="line"><a name="l00601"></a><span class="lineno">  601</span>&#160;    <a class="code" href="a02809.html">PWINDOWSTATION</a> pwinsta;</div>
<div class="line"><a name="l00602"></a><span class="lineno">  602</span>&#160; </div>
<div class="line"><a name="l00603"></a><span class="lineno">  603</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00604"></a><span class="lineno">  604</span>&#160;<span class="comment">     * Validate the object</span></div>
<div class="line"><a name="l00605"></a><span class="lineno">  605</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00606"></a><span class="lineno">  606</span>&#160;    <span class="keywordflow">if</span> (!NT_SUCCESS(ObReferenceObjectByHandle(</div>
<div class="line"><a name="l00607"></a><span class="lineno">  607</span>&#160;            h,</div>
<div class="line"><a name="l00608"></a><span class="lineno">  608</span>&#160;            0,</div>
<div class="line"><a name="l00609"></a><span class="lineno">  609</span>&#160;            NULL,</div>
<div class="line"><a name="l00610"></a><span class="lineno">  610</span>&#160;            KeGetPreviousMode(),</div>
<div class="line"><a name="l00611"></a><span class="lineno">  611</span>&#160;            &amp;pObject,</div>
<div class="line"><a name="l00612"></a><span class="lineno">  612</span>&#160;            &amp;ohi))) {</div>
<div class="line"><a name="l00613"></a><span class="lineno">  613</span>&#160;        <span class="keywordflow">return</span> FALSE;</div>
<div class="line"><a name="l00614"></a><span class="lineno">  614</span>&#160;    }</div>
<div class="line"><a name="l00615"></a><span class="lineno">  615</span>&#160; </div>
<div class="line"><a name="l00616"></a><span class="lineno">  616</span>&#160;    pHead = OBJECT_TO_OBJECT_HEADER(pObject);</div>
<div class="line"><a name="l00617"></a><span class="lineno">  617</span>&#160;    <span class="keywordflow">if</span> (pHead-&gt;Type != *<a class="code" href="a00899.html#a23e8283bc242953b172d97079c117f38">ExWindowStationObjectType</a> &amp;&amp;</div>
<div class="line"><a name="l00618"></a><span class="lineno">  618</span>&#160;            pHead-&gt;Type != *<a class="code" href="a00899.html#a6b562f476cdc12794cf052fff8d41096">ExDesktopObjectType</a>) {</div>
<div class="line"><a name="l00619"></a><span class="lineno">  619</span>&#160;        <a class="code" href="a00371.html#ae61d954062a9ece52e350e54cad9a23d">RIPERR0</a>(ERROR_INVALID_FUNCTION, <a class="code" href="a00371.html#a41f433389f20db57f042022a662e96de">RIP_WARNING</a>, <span class="stringliteral">&quot;Object is not a USER object&quot;</span>);</div>
<div class="line"><a name="l00620"></a><span class="lineno">  620</span>&#160;        ObDereferenceObject(pObject);</div>
<div class="line"><a name="l00621"></a><span class="lineno">  621</span>&#160;        <span class="keywordflow">return</span> FALSE;</div>
<div class="line"><a name="l00622"></a><span class="lineno">  622</span>&#160;    }</div>
<div class="line"><a name="l00623"></a><span class="lineno">  623</span>&#160; </div>
<div class="line"><a name="l00624"></a><span class="lineno">  624</span>&#160;    <span class="keywordflow">try</span> {</div>
<div class="line"><a name="l00625"></a><span class="lineno">  625</span>&#160;        <span class="keywordflow">switch</span> (nIndex) {</div>
<div class="line"><a name="l00626"></a><span class="lineno">  626</span>&#160;        <span class="keywordflow">case</span> UOI_FLAGS:</div>
<div class="line"><a name="l00627"></a><span class="lineno">  627</span>&#160;            dwLengthNeeded = <span class="keyword">sizeof</span>(USEROBJECTFLAGS);</div>
<div class="line"><a name="l00628"></a><span class="lineno">  628</span>&#160;            <span class="keywordflow">if</span> (nLength &lt; <span class="keyword">sizeof</span>(USEROBJECTFLAGS)) {</div>
<div class="line"><a name="l00629"></a><span class="lineno">  629</span>&#160;                <a class="code" href="a00371.html#ae61d954062a9ece52e350e54cad9a23d">RIPERR0</a>(ERROR_INSUFFICIENT_BUFFER, <a class="code" href="a00371.html#ad6b24a3d61abdc148c8751b5c5add686">RIP_VERBOSE</a>, <span class="stringliteral">&quot;&quot;</span>);</div>
<div class="line"><a name="l00630"></a><span class="lineno">  630</span>&#160;                fSuccess = FALSE;</div>
<div class="line"><a name="l00631"></a><span class="lineno">  631</span>&#160;                <span class="keywordflow">break</span>;</div>
<div class="line"><a name="l00632"></a><span class="lineno">  632</span>&#160;            }</div>
<div class="line"><a name="l00633"></a><span class="lineno">  633</span>&#160;            puof = pvInfo;</div>
<div class="line"><a name="l00634"></a><span class="lineno">  634</span>&#160;            puof-&gt;fInherit = (ohi.HandleAttributes &amp; OBJ_INHERIT) ? TRUE : FALSE;</div>
<div class="line"><a name="l00635"></a><span class="lineno">  635</span>&#160;            puof-&gt;fReserved = 0;</div>
<div class="line"><a name="l00636"></a><span class="lineno">  636</span>&#160;            puof-&gt;dwFlags = 0;</div>
<div class="line"><a name="l00637"></a><span class="lineno">  637</span>&#160;            <span class="keywordflow">if</span> (pHead-&gt;Type == *<a class="code" href="a00899.html#a6b562f476cdc12794cf052fff8d41096">ExDesktopObjectType</a>) {</div>
<div class="line"><a name="l00638"></a><span class="lineno">  638</span>&#160;                <span class="keywordflow">if</span> (<a class="code" href="a00656.html#a3041cd5a188df2240f5e29eaa55d01ac">CheckDesktopHookFlag</a>(PpiCurrent(), h))</div>
<div class="line"><a name="l00639"></a><span class="lineno">  639</span>&#160;                    puof-&gt;dwFlags |= DF_ALLOWOTHERACCOUNTHOOK;</div>
<div class="line"><a name="l00640"></a><span class="lineno">  640</span>&#160;            } <span class="keywordflow">else</span> {</div>
<div class="line"><a name="l00641"></a><span class="lineno">  641</span>&#160;                <span class="keywordflow">if</span> (!(((<a class="code" href="a02809.html">PWINDOWSTATION</a>)pObject)-&gt;dwFlags &amp; WSF_NOIO))</div>
<div class="line"><a name="l00642"></a><span class="lineno">  642</span>&#160;                    puof-&gt;dwFlags |= WSF_VISIBLE;</div>
<div class="line"><a name="l00643"></a><span class="lineno">  643</span>&#160;            }</div>
<div class="line"><a name="l00644"></a><span class="lineno">  644</span>&#160;            <span class="keywordflow">break</span>;</div>
<div class="line"><a name="l00645"></a><span class="lineno">  645</span>&#160; </div>
<div class="line"><a name="l00646"></a><span class="lineno">  646</span>&#160;        <span class="keywordflow">case</span> UOI_NAME:</div>
<div class="line"><a name="l00647"></a><span class="lineno">  647</span>&#160;            pstrInfo = POBJECT_NAME(pObject);</div>
<div class="line"><a name="l00648"></a><span class="lineno">  648</span>&#160;            <span class="keywordflow">goto</span> docopy;</div>
<div class="line"><a name="l00649"></a><span class="lineno">  649</span>&#160; </div>
<div class="line"><a name="l00650"></a><span class="lineno">  650</span>&#160;        <span class="keywordflow">case</span> UOI_TYPE:</div>
<div class="line"><a name="l00651"></a><span class="lineno">  651</span>&#160;            pstrInfo = &amp;pHead-&gt;Type-&gt;Name;</div>
<div class="line"><a name="l00652"></a><span class="lineno">  652</span>&#160;docopy:</div>
<div class="line"><a name="l00653"></a><span class="lineno">  653</span>&#160;            <span class="keywordflow">if</span> (pstrInfo) {</div>
<div class="line"><a name="l00654"></a><span class="lineno">  654</span>&#160;                dwLengthNeeded = pstrInfo-&gt;Length + <span class="keyword">sizeof</span>(WCHAR);</div>
<div class="line"><a name="l00655"></a><span class="lineno">  655</span>&#160;                <span class="keywordflow">if</span> (dwLengthNeeded &gt; nLength) {</div>
<div class="line"><a name="l00656"></a><span class="lineno">  656</span>&#160;                    <a class="code" href="a00371.html#ae61d954062a9ece52e350e54cad9a23d">RIPERR0</a>(ERROR_INSUFFICIENT_BUFFER, <a class="code" href="a00371.html#ad6b24a3d61abdc148c8751b5c5add686">RIP_VERBOSE</a>, <span class="stringliteral">&quot;&quot;</span>);</div>
<div class="line"><a name="l00657"></a><span class="lineno">  657</span>&#160;                    fSuccess = FALSE;</div>
<div class="line"><a name="l00658"></a><span class="lineno">  658</span>&#160;                    <span class="keywordflow">break</span>;</div>
<div class="line"><a name="l00659"></a><span class="lineno">  659</span>&#160;                }</div>
<div class="line"><a name="l00660"></a><span class="lineno">  660</span>&#160;                RtlCopyMemory(pvInfo, pstrInfo-&gt;Buffer, pstrInfo-&gt;Length);</div>
<div class="line"><a name="l00661"></a><span class="lineno">  661</span>&#160;                *(PWCHAR)((PBYTE)pvInfo + pstrInfo-&gt;Length) = 0;</div>
<div class="line"><a name="l00662"></a><span class="lineno">  662</span>&#160;            } <span class="keywordflow">else</span> {</div>
<div class="line"><a name="l00663"></a><span class="lineno">  663</span>&#160;                dwLengthNeeded = 0;</div>
<div class="line"><a name="l00664"></a><span class="lineno">  664</span>&#160;            }</div>
<div class="line"><a name="l00665"></a><span class="lineno">  665</span>&#160;            <span class="keywordflow">break</span>;</div>
<div class="line"><a name="l00666"></a><span class="lineno">  666</span>&#160; </div>
<div class="line"><a name="l00667"></a><span class="lineno">  667</span>&#160;        <span class="keywordflow">case</span> UOI_USER_SID:</div>
<div class="line"><a name="l00668"></a><span class="lineno">  668</span>&#160;            <span class="keywordflow">if</span> (pHead-&gt;Type == *<a class="code" href="a00899.html#a23e8283bc242953b172d97079c117f38">ExWindowStationObjectType</a>)</div>
<div class="line"><a name="l00669"></a><span class="lineno">  669</span>&#160;                pwinsta = pObject;</div>
<div class="line"><a name="l00670"></a><span class="lineno">  670</span>&#160;            <span class="keywordflow">else</span></div>
<div class="line"><a name="l00671"></a><span class="lineno">  671</span>&#160;                pwinsta = ((<a class="code" href="a00365.html#a07e239ec4a8e696c787df685bce70b61">PDESKTOP</a>)pObject)-&gt;rpwinstaParent;</div>
<div class="line"><a name="l00672"></a><span class="lineno">  672</span>&#160;            <span class="keywordflow">if</span> (pwinsta-&gt;<a class="code" href="a02809.html#a231342040f95d083ca5ec2bdd1ddd178">psidUser</a> == NULL) {</div>
<div class="line"><a name="l00673"></a><span class="lineno">  673</span>&#160;                dwLengthNeeded = 0;</div>
<div class="line"><a name="l00674"></a><span class="lineno">  674</span>&#160;            } <span class="keywordflow">else</span> {</div>
<div class="line"><a name="l00675"></a><span class="lineno">  675</span>&#160;                dwLengthNeeded = RtlLengthSid(pwinsta-&gt;<a class="code" href="a02809.html#a231342040f95d083ca5ec2bdd1ddd178">psidUser</a>);</div>
<div class="line"><a name="l00676"></a><span class="lineno">  676</span>&#160;                <span class="keywordflow">if</span> (dwLengthNeeded &gt; nLength) {</div>
<div class="line"><a name="l00677"></a><span class="lineno">  677</span>&#160;                    <a class="code" href="a00371.html#ae61d954062a9ece52e350e54cad9a23d">RIPERR0</a>(ERROR_INSUFFICIENT_BUFFER, <a class="code" href="a00371.html#ad6b24a3d61abdc148c8751b5c5add686">RIP_VERBOSE</a>, <span class="stringliteral">&quot;&quot;</span>);</div>
<div class="line"><a name="l00678"></a><span class="lineno">  678</span>&#160;                    fSuccess = FALSE;</div>
<div class="line"><a name="l00679"></a><span class="lineno">  679</span>&#160;                    <span class="keywordflow">break</span>;</div>
<div class="line"><a name="l00680"></a><span class="lineno">  680</span>&#160;                }</div>
<div class="line"><a name="l00681"></a><span class="lineno">  681</span>&#160;                RtlCopyMemory(pvInfo, pwinsta-&gt;<a class="code" href="a02809.html#a231342040f95d083ca5ec2bdd1ddd178">psidUser</a>, dwLengthNeeded);</div>
<div class="line"><a name="l00682"></a><span class="lineno">  682</span>&#160;            }</div>
<div class="line"><a name="l00683"></a><span class="lineno">  683</span>&#160;            <span class="keywordflow">break</span>;</div>
<div class="line"><a name="l00684"></a><span class="lineno">  684</span>&#160; </div>
<div class="line"><a name="l00685"></a><span class="lineno">  685</span>&#160;        <span class="keywordflow">default</span>:</div>
<div class="line"><a name="l00686"></a><span class="lineno">  686</span>&#160;            <a class="code" href="a00371.html#ae61d954062a9ece52e350e54cad9a23d">RIPERR0</a>(ERROR_INVALID_PARAMETER, <a class="code" href="a00371.html#ad6b24a3d61abdc148c8751b5c5add686">RIP_VERBOSE</a>, <span class="stringliteral">&quot;&quot;</span>);</div>
<div class="line"><a name="l00687"></a><span class="lineno">  687</span>&#160;            fSuccess = FALSE;</div>
<div class="line"><a name="l00688"></a><span class="lineno">  688</span>&#160;            <span class="keywordflow">break</span>;</div>
<div class="line"><a name="l00689"></a><span class="lineno">  689</span>&#160;        }</div>
<div class="line"><a name="l00690"></a><span class="lineno">  690</span>&#160;    } except (EXCEPTION_EXECUTE_HANDLER) {</div>
<div class="line"><a name="l00691"></a><span class="lineno">  691</span>&#160;        <a class="code" href="a00371.html#a002956db9fb529e159fb441f09f39b42">RIPNTERR0</a>(GetExceptionCode(), <a class="code" href="a00371.html#ad6b24a3d61abdc148c8751b5c5add686">RIP_VERBOSE</a>, <span class="stringliteral">&quot;&quot;</span>);</div>
<div class="line"><a name="l00692"></a><span class="lineno">  692</span>&#160;        fSuccess = FALSE;</div>
<div class="line"><a name="l00693"></a><span class="lineno">  693</span>&#160;    }</div>
<div class="line"><a name="l00694"></a><span class="lineno">  694</span>&#160; </div>
<div class="line"><a name="l00695"></a><span class="lineno">  695</span>&#160;    *lpnLengthNeeded = dwLengthNeeded;</div>
<div class="line"><a name="l00696"></a><span class="lineno">  696</span>&#160; </div>
<div class="line"><a name="l00697"></a><span class="lineno">  697</span>&#160;    ObDereferenceObject(pObject);</div>
<div class="line"><a name="l00698"></a><span class="lineno">  698</span>&#160; </div>
<div class="line"><a name="l00699"></a><span class="lineno">  699</span>&#160;    <span class="keywordflow">return</span> fSuccess;</div>
<div class="line"><a name="l00700"></a><span class="lineno">  700</span>&#160;}</div>
<div class="line"><a name="l00701"></a><span class="lineno">  701</span>&#160; </div>
<div class="line"><a name="l00702"></a><span class="lineno">  702</span>&#160; </div>
<div class="line"><a name="l00711"></a><span class="lineno"><a class="line" href="a00899.html#a72c0ed497645e5424f99efc4e9a9c6c3">  711</a></span>&#160;BOOL <a class="code" href="a00839.html#a72c0ed497645e5424f99efc4e9a9c6c3">_SetUserObjectInformation</a>(</div>
<div class="line"><a name="l00712"></a><span class="lineno">  712</span>&#160;    HANDLE h,</div>
<div class="line"><a name="l00713"></a><span class="lineno">  713</span>&#160;    <span class="keywordtype">int</span> nIndex,</div>
<div class="line"><a name="l00714"></a><span class="lineno">  714</span>&#160;    PVOID pvInfo,</div>
<div class="line"><a name="l00715"></a><span class="lineno">  715</span>&#160;    <a class="code" href="a00563.html#a074685e97e89d6aa2accdfcb82328699">DWORD</a> nLength)</div>
<div class="line"><a name="l00716"></a><span class="lineno">  716</span>&#160;{</div>
<div class="line"><a name="l00717"></a><span class="lineno">  717</span>&#160;    PUSEROBJECTFLAGS puof;</div>
<div class="line"><a name="l00718"></a><span class="lineno">  718</span>&#160;    BOOL fSuccess = TRUE;</div>
<div class="line"><a name="l00719"></a><span class="lineno">  719</span>&#160;    PVOID pObject;</div>
<div class="line"><a name="l00720"></a><span class="lineno">  720</span>&#160;    POBJECT_HEADER pHead;</div>
<div class="line"><a name="l00721"></a><span class="lineno">  721</span>&#160;    <a class="code" href="a00563.html#a074685e97e89d6aa2accdfcb82328699">DWORD</a> dwLengthNeeded = 0;</div>
<div class="line"><a name="l00722"></a><span class="lineno">  722</span>&#160;    OBJECT_HANDLE_INFORMATION ohi;</div>
<div class="line"><a name="l00723"></a><span class="lineno">  723</span>&#160;    OBJECT_HANDLE_FLAG_INFORMATION ofi;</div>
<div class="line"><a name="l00724"></a><span class="lineno">  724</span>&#160; </div>
<div class="line"><a name="l00725"></a><span class="lineno">  725</span>&#160;    <span class="comment">/*</span></div>
<div class="line"><a name="l00726"></a><span class="lineno">  726</span>&#160;<span class="comment">     * Validate the object</span></div>
<div class="line"><a name="l00727"></a><span class="lineno">  727</span>&#160;<span class="comment">     */</span></div>
<div class="line"><a name="l00728"></a><span class="lineno">  728</span>&#160;    <span class="keywordflow">if</span> (!NT_SUCCESS(ObReferenceObjectByHandle(</div>
<div class="line"><a name="l00729"></a><span class="lineno">  729</span>&#160;            h,</div>
<div class="line"><a name="l00730"></a><span class="lineno">  730</span>&#160;            0,</div>
<div class="line"><a name="l00731"></a><span class="lineno">  731</span>&#160;            NULL,</div>
<div class="line"><a name="l00732"></a><span class="lineno">  732</span>&#160;            KeGetPreviousMode(),</div>
<div class="line"><a name="l00733"></a><span class="lineno">  733</span>&#160;            &amp;pObject,</div>
<div class="line"><a name="l00734"></a><span class="lineno">  734</span>&#160;            &amp;ohi))) {</div>
<div class="line"><a name="l00735"></a><span class="lineno">  735</span>&#160;        <span class="keywordflow">return</span> FALSE;</div>
<div class="line"><a name="l00736"></a><span class="lineno">  736</span>&#160;    }</div>
<div class="line"><a name="l00737"></a><span class="lineno">  737</span>&#160;    pHead = OBJECT_TO_OBJECT_HEADER(pObject);</div>
<div class="line"><a name="l00738"></a><span class="lineno">  738</span>&#160;    <span class="keywordflow">if</span> (pHead-&gt;Type != *<a class="code" href="a00899.html#a23e8283bc242953b172d97079c117f38">ExWindowStationObjectType</a> &amp;&amp;</div>
<div class="line"><a name="l00739"></a><span class="lineno">  739</span>&#160;            pHead-&gt;Type != *<a class="code" href="a00899.html#a6b562f476cdc12794cf052fff8d41096">ExDesktopObjectType</a>) {</div>
<div class="line"><a name="l00740"></a><span class="lineno">  740</span>&#160;        <a class="code" href="a00371.html#ae61d954062a9ece52e350e54cad9a23d">RIPERR0</a>(ERROR_INVALID_FUNCTION, <a class="code" href="a00371.html#a41f433389f20db57f042022a662e96de">RIP_WARNING</a>, <span class="stringliteral">&quot;Object is not a USER object&quot;</span>);</div>
<div class="line"><a name="l00741"></a><span class="lineno">  741</span>&#160;        ObDereferenceObject(pObject);</div>
<div class="line"><a name="l00742"></a><span class="lineno">  742</span>&#160;        <span class="keywordflow">return</span> FALSE;</div>
<div class="line"><a name="l00743"></a><span class="lineno">  743</span>&#160;    }</div>
<div class="line"><a name="l00744"></a><span class="lineno">  744</span>&#160; </div>
<div class="line"><a name="l00745"></a><span class="lineno">  745</span>&#160;    <span class="keywordflow">try</span> {</div>
<div class="line"><a name="l00746"></a><span class="lineno">  746</span>&#160;        <span class="keywordflow">switch</span> (nIndex) {</div>
<div class="line"><a name="l00747"></a><span class="lineno">  747</span>&#160;        <span class="keywordflow">case</span> UOI_FLAGS:</div>
<div class="line"><a name="l00748"></a><span class="lineno">  748</span>&#160;            <span class="keywordflow">if</span> (nLength &lt; <span class="keyword">sizeof</span>(USEROBJECTFLAGS)) {</div>
<div class="line"><a name="l00749"></a><span class="lineno">  749</span>&#160;                <a class="code" href="a00371.html#ae61d954062a9ece52e350e54cad9a23d">RIPERR0</a>(ERROR_INVALID_DATA, <a class="code" href="a00371.html#ad6b24a3d61abdc148c8751b5c5add686">RIP_VERBOSE</a>, <span class="stringliteral">&quot;&quot;</span>);</div>
<div class="line"><a name="l00750"></a><span class="lineno">  750</span>&#160;                fSuccess = FALSE;</div>
<div class="line"><a name="l00751"></a><span class="lineno">  751</span>&#160;                <span class="keywordflow">break</span>;</div>
<div class="line"><a name="l00752"></a><span class="lineno">  752</span>&#160;            }</div>
<div class="line"><a name="l00753"></a><span class="lineno">  753</span>&#160;            puof = pvInfo;</div>
<div class="line"><a name="l00754"></a><span class="lineno">  754</span>&#160;            ZwQueryObject(h, ObjectHandleFlagInformation,</div>
<div class="line"><a name="l00755"></a><span class="lineno">  755</span>&#160;                    &amp;ofi, <span class="keyword">sizeof</span>(ofi), NULL);</div>
<div class="line"><a name="l00756"></a><span class="lineno">  756</span>&#160;            ofi.Inherit = puof-&gt;fInherit;</div>
<div class="line"><a name="l00757"></a><span class="lineno">  757</span>&#160;            ZwSetInformationObject(h, ObjectHandleFlagInformation,</div>
<div class="line"><a name="l00758"></a><span class="lineno">  758</span>&#160;                    &amp;ofi, <span class="keyword">sizeof</span>(ofi));</div>
<div class="line"><a name="l00759"></a><span class="lineno">  759</span>&#160;            <span class="keywordflow">if</span> (pHead-&gt;Type == *<a class="code" href="a00899.html#a6b562f476cdc12794cf052fff8d41096">ExDesktopObjectType</a>) {</div>
<div class="line"><a name="l00760"></a><span class="lineno">  760</span>&#160;                <a class="code" href="a00656.html#af264e79fb471f46e674f990f1bc50bfe">SetDesktopHookFlag</a>(PpiCurrent(), h,</div>
<div class="line"><a name="l00761"></a><span class="lineno">  761</span>&#160;                        puof-&gt;dwFlags &amp; DF_ALLOWOTHERACCOUNTHOOK);</div>
<div class="line"><a name="l00762"></a><span class="lineno">  762</span>&#160;            }</div>
<div class="line"><a name="l00763"></a><span class="lineno">  763</span>&#160;            <span class="keywordflow">break</span>;</div>
<div class="line"><a name="l00764"></a><span class="lineno">  764</span>&#160;        <span class="keywordflow">default</span>:</div>
<div class="line"><a name="l00765"></a><span class="lineno">  765</span>&#160;            <a class="code" href="a00371.html#ae61d954062a9ece52e350e54cad9a23d">RIPERR0</a>(ERROR_INVALID_PARAMETER, <a class="code" href="a00371.html#ad6b24a3d61abdc148c8751b5c5add686">RIP_VERBOSE</a>, <span class="stringliteral">&quot;&quot;</span>);</div>
<div class="line"><a name="l00766"></a><span class="lineno">  766</span>&#160;            fSuccess = FALSE;</div>
<div class="line"><a name="l00767"></a><span class="lineno">  767</span>&#160;            <span class="keywordflow">break</span>;</div>
<div class="line"><a name="l00768"></a><span class="lineno">  768</span>&#160;        }</div>
<div class="line"><a name="l00769"></a><span class="lineno">  769</span>&#160;    } except (EXCEPTION_EXECUTE_HANDLER) {</div>
<div class="line"><a name="l00770"></a><span class="lineno">  770</span>&#160;        <a class="code" href="a00371.html#a002956db9fb529e159fb441f09f39b42">RIPNTERR0</a>(GetExceptionCode(), <a class="code" href="a00371.html#ad6b24a3d61abdc148c8751b5c5add686">RIP_VERBOSE</a>, <span class="stringliteral">&quot;&quot;</span>);</div>
<div class="line"><a name="l00771"></a><span class="lineno">  771</span>&#160;        fSuccess = FALSE;</div>
<div class="line"><a name="l00772"></a><span class="lineno">  772</span>&#160;    }</div>
<div class="line"><a name="l00773"></a><span class="lineno">  773</span>&#160; </div>
<div class="line"><a name="l00774"></a><span class="lineno">  774</span>&#160;    ObDereferenceObject(pObject);</div>
<div class="line"><a name="l00775"></a><span class="lineno">  775</span>&#160; </div>
<div class="line"><a name="l00776"></a><span class="lineno">  776</span>&#160;    <span class="keywordflow">return</span> fSuccess;</div>
<div class="line"><a name="l00777"></a><span class="lineno">  777</span>&#160;}</div>
</div><!-- fragment --></div><!-- contents -->
</div><!-- doc-content -->
<div class="ttc" id="aa00371_html_a01c4659626880ba56745765a3580a36b"><div class="ttname"><a href="a00371.html#a01c4659626880ba56745765a3580a36b">RIPMSG0</a></div><div class="ttdeci">#define RIPMSG0(flags, szFmt)</div><div class="ttdef"><b>Definition:</b> <a href="a00371_source.html#l00131">winerrp.h:131</a></div></div>
<div class="ttc" id="aa00899_html_a0c5a8a788cfe53b3b6a461f1bb9ef631"><div class="ttname"><a href="a00899.html#a0c5a8a788cfe53b3b6a461f1bb9ef631">_OpenWindowStation</a></div><div class="ttdeci">HWINSTA _OpenWindowStation(POBJECT_ATTRIBUTES, DWORD)</div><div class="ttdef"><b>Definition:</b> <a href="a00920_source.html#l00690">winsta.c:690</a></div></div>
<div class="ttc" id="aa00839_html_a9f78afc46aa1b978b1ad2b0922e998e1"><div class="ttname"><a href="a00839.html#a9f78afc46aa1b978b1ad2b0922e998e1">AccessCheckObject</a></div><div class="ttdeci">BOOL AccessCheckObject(PVOID pobj, ACCESS_MASK amRequest)</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00517">security.c:517</a></div></div>
<div class="ttc" id="aa00899_html_a6b562f476cdc12794cf052fff8d41096"><div class="ttname"><a href="a00899.html#a6b562f476cdc12794cf052fff8d41096">ExDesktopObjectType</a></div><div class="ttdeci">POBJECT_TYPE * ExDesktopObjectType</div></div>
<div class="ttc" id="aa00839_html_a952a73fcd6fbe1ccb97718b33796e4be"><div class="ttname"><a href="a00839.html#a952a73fcd6fbe1ccb97718b33796e4be">_GetUserObjectInformation</a></div><div class="ttdeci">BOOL _GetUserObjectInformation(HANDLE h, int nIndex, PVOID pvInfo, DWORD nLength, LPDWORD lpnLengthNeeded)</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00587">security.c:587</a></div></div>
<div class="ttc" id="aa00839_html_a14fe1eb47a22ba1b713ca76ddf4180af"><div class="ttname"><a href="a00839.html#a14fe1eb47a22ba1b713ca76ddf4180af">CheckWinstaWriteAttributesAccess</a></div><div class="ttdeci">BOOL CheckWinstaWriteAttributesAccess(void)</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00485">security.c:485</a></div></div>
<div class="ttc" id="aa00371_html_ad6b24a3d61abdc148c8751b5c5add686"><div class="ttname"><a href="a00371.html#ad6b24a3d61abdc148c8751b5c5add686">RIP_VERBOSE</a></div><div class="ttdeci">#define RIP_VERBOSE</div><div class="ttdef"><b>Definition:</b> <a href="a00371_source.html#l00030">winerrp.h:30</a></div></div>
<div class="ttc" id="aa00656_html_af264e79fb471f46e674f990f1bc50bfe"><div class="ttname"><a href="a00656.html#af264e79fb471f46e674f990f1bc50bfe">SetDesktopHookFlag</a></div><div class="ttdeci">BOOL SetDesktopHookFlag(PPROCESSINFO ppi, HANDLE hdesk, BOOL fSet)</div><div class="ttdef"><b>Definition:</b> <a href="a00656_source.html#l03292">desktop.c:3292</a></div></div>
<div class="ttc" id="aa00839_html_aa43121e2fd14c10e80b0025f77eb3a00"><div class="ttname"><a href="a00839.html#aa43121e2fd14c10e80b0025f77eb3a00">DesktopMapping</a></div><div class="ttdeci">GENERIC_MAPPING DesktopMapping</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00047">security.c:47</a></div></div>
<div class="ttc" id="aa00839_html_a5138b9fb6a9217820dab0fa1bc797b4d"><div class="ttname"><a href="a00839.html#a5138b9fb6a9217820dab0fa1bc797b4d">AllocAce</a></div><div class="ttdeci">PACCESS_ALLOWED_ACE AllocAce(PACCESS_ALLOWED_ACE pace, BYTE bType, BYTE bFlags, ACCESS_MASK am, PSID psid, LPDWORD lpdwLength)</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00071">security.c:71</a></div></div>
<div class="ttc" id="aa00371_html_a162a73e20dfabca084a3ebb4581631a8"><div class="ttname"><a href="a00371.html#a162a73e20dfabca084a3ebb4581631a8">UserAssert</a></div><div class="ttdeci">#define UserAssert(exp)</div><div class="ttdef"><b>Definition:</b> <a href="a00950_source.html#l00117">usersrv.h:117</a></div></div>
<div class="ttc" id="aa03629_html"><div class="ttname"><a href="a03629.html">precomp.h</a></div></div>
<div class="ttc" id="aa03257_html_ad9f551216ba73947832de96844110fca"><div class="ttname"><a href="a03257.html#ad9f551216ba73947832de96844110fca">grpwinstaList</a></div><div class="ttdeci">PWINDOWSTATION grpwinstaList</div><div class="ttdef"><b>Definition:</b> <a href="a03257_source.html#l00182">kernel/globals.c:182</a></div></div>
<div class="ttc" id="aa00839_html_a72c0ed497645e5424f99efc4e9a9c6c3"><div class="ttname"><a href="a00839.html#a72c0ed497645e5424f99efc4e9a9c6c3">_SetUserObjectInformation</a></div><div class="ttdeci">BOOL _SetUserObjectInformation(HANDLE h, int nIndex, PVOID pvInfo, DWORD nLength)</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00711">security.c:711</a></div></div>
<div class="ttc" id="aa02809_html_a384d45dfef3f95188b5c7a7a09213d35"><div class="ttname"><a href="a02809.html#a384d45dfef3f95188b5c7a7a09213d35">tagWINDOWSTATION::luidUser</a></div><div class="ttdeci">LUID luidUser</div><div class="ttdef"><b>Definition:</b> <a href="a00899_source.html#l01784">userk.h:1784</a></div></div>
<div class="ttc" id="aa00371_html_ae61d954062a9ece52e350e54cad9a23d"><div class="ttname"><a href="a00371.html#ae61d954062a9ece52e350e54cad9a23d">RIPERR0</a></div><div class="ttdeci">#define RIPERR0(idErr, flags, szFmt)</div><div class="ttdef"><b>Definition:</b> <a href="a00371_source.html#l00119">winerrp.h:119</a></div></div>
<div class="ttc" id="aa00839_html_aee1b6f2046e16e101286ca457345406d"><div class="ttname"><a href="a00839.html#aee1b6f2046e16e101286ca457345406d">_UserTestForWinStaAccess</a></div><div class="ttdeci">NTSTATUS _UserTestForWinStaAccess(PUNICODE_STRING pstrWinSta, BOOL fInherit)</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00296">security.c:296</a></div></div>
<div class="ttc" id="aa02809_html"><div class="ttname"><a href="a02809.html">tagWINDOWSTATION</a></div><div class="ttdef"><b>Definition:</b> <a href="a00899_source.html#l01744">userk.h:1744</a></div></div>
<div class="ttc" id="aa02809_html_a231342040f95d083ca5ec2bdd1ddd178"><div class="ttname"><a href="a02809.html#a231342040f95d083ca5ec2bdd1ddd178">tagWINDOWSTATION::psidUser</a></div><div class="ttdeci">PSID psidUser</div><div class="ttdef"><b>Definition:</b> <a href="a00899_source.html#l01785">userk.h:1785</a></div></div>
<div class="ttc" id="aa00563_html_a074685e97e89d6aa2accdfcb82328699"><div class="ttname"><a href="a00563.html#a074685e97e89d6aa2accdfcb82328699">DWORD</a></div><div class="ttdeci">ddeml v[i&lt; inst &gt;][t&lt; type &gt;][hObj|pObj] Dump DDEML state information ddeml lists all ddeml instances for this process n ddeml t&lt; type &gt; lists all ddeml objects of the given type n n assumes link is first DWORD</div><div class="ttdef"><b>Definition:</b> <a href="a00563_source.html#l00175">exts.h:175</a></div></div>
<div class="ttc" id="aa00839_html_a37058e8b761a27eb3d428f1f5a567928"><div class="ttname"><a href="a00839.html#a37058e8b761a27eb3d428f1f5a567928">TestForInteractiveUser</a></div><div class="ttdeci">NTSTATUS TestForInteractiveUser(PLUID pluidCaller)</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00258">security.c:258</a></div></div>
<div class="ttc" id="aa00839_html_adc61ef551cf8e713e7f0014b5932ffcd"><div class="ttname"><a href="a00839.html#adc61ef551cf8e713e7f0014b5932ffcd">WinStaMapping</a></div><div class="ttdeci">GENERIC_MAPPING WinStaMapping</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00029">security.c:29</a></div></div>
<div class="ttc" id="aa00365_html_a07e239ec4a8e696c787df685bce70b61"><div class="ttname"><a href="a00365.html#a07e239ec4a8e696c787df685bce70b61">PDESKTOP</a></div><div class="ttdeci">struct tagDESKTOP * PDESKTOP</div><div class="ttdef"><b>Definition:</b> <a href="a00365_source.html#l00052">user.h:52</a></div></div>
<div class="ttc" id="aa00839_html_a56fbb1227212dadeed7bcf9764bcb0bf"><div class="ttname"><a href="a00839.html#a56fbb1227212dadeed7bcf9764bcb0bf">CreateSecurityDescriptor</a></div><div class="ttdeci">PSECURITY_DESCRIPTOR CreateSecurityDescriptor(PACCESS_ALLOWED_ACE paceList, DWORD cAce, DWORD cbAce, BOOLEAN fDaclDefaulted)</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00125">security.c:125</a></div></div>
<div class="ttc" id="aa00656_html_a3041cd5a188df2240f5e29eaa55d01ac"><div class="ttname"><a href="a00656.html#a3041cd5a188df2240f5e29eaa55d01ac">CheckDesktopHookFlag</a></div><div class="ttdeci">BOOL CheckDesktopHookFlag(PPROCESSINFO ppi, HANDLE hdesk)</div><div class="ttdef"><b>Definition:</b> <a href="a00656_source.html#l03272">desktop.c:3272</a></div></div>
<div class="ttc" id="aa00839_html_ad44fb853080371fbd9ce7e895cb2d46d"><div class="ttname"><a href="a00839.html#ad44fb853080371fbd9ce7e895cb2d46d">InitSecurity</a></div><div class="ttdeci">BOOL InitSecurity(VOID)</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00187">security.c:187</a></div></div>
<div class="ttc" id="aa02905_html"><div class="ttname"><a href="a02905.html">tagPROCESSINFO</a></div><div class="ttdef"><b>Definition:</b> <a href="a00899_source.html#l02386">userk.h:2386</a></div></div>
<div class="ttc" id="aa00371_html_a41f433389f20db57f042022a662e96de"><div class="ttname"><a href="a00371.html#a41f433389f20db57f042022a662e96de">RIP_WARNING</a></div><div class="ttdeci">#define RIP_WARNING</div><div class="ttdef"><b>Definition:</b> <a href="a00371_source.html#l00029">winerrp.h:29</a></div></div>
<div class="ttc" id="aa00899_html_a23e8283bc242953b172d97079c117f38"><div class="ttname"><a href="a00899.html#a23e8283bc242953b172d97079c117f38">ExWindowStationObjectType</a></div><div class="ttdeci">POBJECT_TYPE * ExWindowStationObjectType</div></div>
<div class="ttc" id="aa00839_html_ad04da95adc05d69c32d9d6b702c89489"><div class="ttname"><a href="a00839.html#ad04da95adc05d69c32d9d6b702c89489">gpsdInitWinSta</a></div><div class="ttdeci">PSECURITY_DESCRIPTOR gpsdInitWinSta</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00020">security.c:20</a></div></div>
<div class="ttc" id="aa00680_html_a80a4bdd9ccbc04bf79c9c3e18860adfd"><div class="ttname"><a href="a00680.html#a80a4bdd9ccbc04bf79c9c3e18860adfd">OpenEffectiveToken</a></div><div class="ttdeci">NTSTATUS OpenEffectiveToken(PHANDLE phToken)</div><div class="ttdef"><b>Definition:</b> <a href="a00680_source.html#l00028">ex.c:28</a></div></div>
<div class="ttc" id="aa00839_html_ad5164087ca1b77435e44c75a73c0538f"><div class="ttname"><a href="a00839.html#ad5164087ca1b77435e44c75a73c0538f">IsPrivileged</a></div><div class="ttdeci">BOOL IsPrivileged(PPRIVILEGE_SET ppSet)</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00554">security.c:554</a></div></div>
<div class="ttc" id="aa02905_html_a31c3805f3b611723d2ce7b28d87c6859"><div class="ttname"><a href="a02905.html#a31c3805f3b611723d2ce7b28d87c6859">tagPROCESSINFO::amwinsta</a></div><div class="ttdeci">ACCESS_MASK amwinsta</div><div class="ttdef"><b>Definition:</b> <a href="a00899_source.html#l02401">userk.h:2401</a></div></div>
<div class="ttc" id="aa00839_html_a099bb06ddaffa8360a390372c20cd010"><div class="ttname"><a href="a00839.html#a099bb06ddaffa8360a390372c20cd010">CheckGrantedAccess</a></div><div class="ttdeci">BOOL CheckGrantedAccess(ACCESS_MASK amGranted, ACCESS_MASK amRequest)</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00459">security.c:459</a></div></div>
<div class="ttc" id="aa00839_html_a515921616ee307c5862eb0be3a8e7c1e"><div class="ttname"><a href="a00839.html#a515921616ee307c5862eb0be3a8e7c1e">psTcb</a></div><div class="ttdeci">PRIVILEGE_SET psTcb</div><div class="ttdef"><b>Definition:</b> <a href="a00839_source.html#l00022">security.c:22</a></div></div>
<div class="ttc" id="aa00371_html_a002956db9fb529e159fb441f09f39b42"><div class="ttname"><a href="a00371.html#a002956db9fb529e159fb441f09f39b42">RIPNTERR0</a></div><div class="ttdeci">#define RIPNTERR0(idErr, flags, szFmt)</div><div class="ttdef"><b>Definition:</b> <a href="a00371_source.html#l00125">winerrp.h:125</a></div></div>
<!-- start footer part -->
<div id="nav-path" class="navpath"><!-- id is needed for treeview function! -->
  <ul>
    <li class="navelem"><a class="el" href="dir_885cc87fac2d91e269af0a5a959fa5f6.html">E:</a></li><li class="navelem"><a class="el" href="dir_4e091ed8704426a7a4980368ba259fde.html">git</a></li><li class="navelem"><a class="el" href="dir_cd70cb5eb491250157f2d55d3ff4b13e.html">backup</a></li><li class="navelem"><a class="el" href="dir_ba2b673b566ba104b956abdc6dec0552.html">org</a></li><li class="navelem"><a class="el" href="dir_5bb0003d7907b45051943541418399f5.html">ntuser</a></li><li class="navelem"><a class="el" href="dir_2a0a56546b70a0973705719e6a88eab3.html">kernel</a></li><li class="navelem"><a class="el" href="a00839.html">security.c</a></li>
    <li class="footer">制作者
    <a href="http://www.doxygen.org/index.html">
    <img class="footer" src="doxygen.png" alt="doxygen"/></a> 1.8.17 </li>
  </ul>
</div>
</body>
</html>
